Archive

Ampath says it suffered a hack and is disputing the claim that 80 million patient records were stolen. For defenders, the issue is the confirmed intrusion and the exposure risk to healthcare records, even if the scale of theft is contested.

This reports regulatory or law-enforcement action tied to alleged data breaches affecting food processing companies in Ghana. For defenders, the issue is exposure and consequence: named organizations in a local industrial sector are now facing official action, which raises the priority of breach investigation, containment, and notification handling.

Retailers in multiple markets are being named as cybercrime targets, which points to sustained pressure on the sector rather than a one-off incident. For defenders, the immediate issue is exposure across storefront, loyalty, and payment environments, and the need to prioritize monitoring and response around retail-facing systems.

Ghana is treating cybersecurity as an essential service, which raises the bar for government and critical infrastructure operators to maintain and protect cyber capabilities. For defenders, that usually means tighter operational expectations, clearer obligations during incidents, and more scrutiny over resilience across essential systems.

The report points to malware tied to ransomware activity inside an air traffic control operator’s OT environment. For defenders, the issue is not just malware presence but exposure of operational systems that can affect critical infrastructure resilience and incident response priority.

The story warns that scammers are copying government sites to trick jobseekers, which makes this a public-facing phishing and impersonation risk. For defenders, the issue is exposure of citizens to credential theft and fraud, plus the need for agencies to monitor lookalike domains and publish clear guidance for users.

Kenya has expanded its privacy rules to treat political opinions and trade union data as sensitive information. For defenders and compliance teams, that raises the bar for collection, access controls, retention, and incident handling wherever employee or citizen data may include those categories.

Terra is putting money into a cyber defence company, which points to continued investor interest in security capabilities rather than a breach or attack. The story matters mainly as a market signal and a reminder that cyber defence remains a live investment area in Nigeria.

A regulator is investigating a ransomware attack on Cartrack. The piece matters because it signals both an active incident and possible follow-on regulatory scrutiny for a company handling vehicle and fleet tracking data.

The piece appears to center on a South African insurer disputing a hacking allegation and instead linking the matter to a cyber breach at MIP. For defenders, the practical issue is whether the exposure sits with a third party and what that means for incident scope, notification duties, and customer-impact assessment.

The item describes a suspected phishing scam tied to a fake U.S. Green Card email that tells recipients not to open an attached PDF. For defenders, the issue is email-based credential theft and malware delivery, which can affect individuals and organizations that process immigration-related messages or impersonate official government services.

Three South African organizations publicly signaled possible data breaches over the same weekend. For defenders, the immediate issue is exposure of customer or account data and the need to confirm scope, contain any intrusion, and communicate clearly while the facts are still being established.

A ransomware label is being tied to an apparent target in Egypt’s airport sector. For defenders, the main issue is exposure in critical infrastructure and the need to check whether the claim reflects a real intrusion, an attempted extortion, or threat branding.

EasyEquities is warning customers about a possible data breach. For defenders, the main issue is exposure of customer data and the need to assess whether account access, identity data, or other personal records were affected.

Malawi is warning about MikroTik vulnerabilities, which suggests a network-security exposure affecting routers or related infrastructure used in the country. For defenders, the immediate question is whether exposed devices need patching, hardening, or replacement before they are abused for unauthorized access or lateral movement.

A tech company says it has identified what it describes as an AI-assisted cyberattack against a government target. For defenders, the key issue is exposure to a new attack method rather than a confirmed large-scale breach, so security teams should treat the report as a signal to review controls around phishing, automation abuse, and government-facing systems.

A major South African vehicle tracking provider was hit by a cyberattack. For defenders, the immediate questions are whether customer or operational data was exposed, whether tracking services were disrupted, and whether the incident creates follow-on risk for fleet, insurance, or recovery workflows that depend on the company.

A large KFC franchise operator in South Africa has been hit by a major data breach involving a large volume of data. For defenders, the main issues are exposure of sensitive business or customer information, the need to check for lateral movement or follow-on access, and the obligation to verify containment, notification, and any third-party risk tied to the franchise environment.

Spanish media are reporting that a former Moroccan intelligence official may hold important information about the Pegasus spyware operation. For defenders, the main relevance is in the intelligence and attribution angle: this could affect how investigators understand targeting, exposure, and state-linked espionage activity tied to Pegasus.

Nigeria’s data protection regulator is discussing closer coordination with European agencies on data protection and criminal investigations. For defenders, that points to more cross-border compliance pressure and a stronger link between privacy enforcement and investigative activity.

Ghana’s Cybersecurity Authority says it handled a large volume of incidents over a six-month period. For defenders, the main takeaway is operational: the scale of reported incidents points to sustained pressure on incident response, triage, and coordination, and it increases the compliance and reporting burden for organizations operating in the country.

Banks are being pushed to use AI to keep pace with changing scam methods. For defenders, the main issue is a shift in fraud detection and customer protection priorities in the financial sector, with an emphasis on adapting controls as attackers change tactics.