Cybersecurity news from South Africa, newest first. Every story links to the original publisher.
A Yazi study of SA and UK consumers found South Africans lose money to scams about three times as often as UK respondents, and 75% of SA victims recovered nothing, despite most knowing about AI voice cloning.
Read at ITWeb ↗Vodacom, MTN, Cell C and Rain told MyBroadband their systems were unaffected by the two critical PHP vulnerabilities leaked ahead of disclosure.
Absa says customers who share credentials with an AI assistant could be held liable for losses; local banks are blocking outside agents for now.
Fraudsters posing as courier companies use payment requests and fake tracking links to steal money and card details from online shoppers.
Attackers claim to have taken 1.6 million records from the insurer that covers mining and steel workers. The claim has not been independently confirmed.
The Presidency said the site was temporarily unavailable in response to a global cybersecurity event.
Scammers are using lookalike traffic-fine sites to trick drivers into paying fake fines and handing over card details.
Afrihost, 1-grid, Axxess and others scrambled to protect customer servers after details of two critical PHP bugs leaked before patches were ready.
Two leaked PHP vulnerabilities allow remote code execution on exposed web servers worldwide, including thousands in South Africa.
Acting police minister Firoz Cachalia set out the police service's strategy for investigating cybercrime.
A local security expert says South African drivers of connected vehicles should take the demonstration seriously.
Domains.co.za's CEO describes how a client's vibe-coded site was hacked within a week, and what it says about shipping AI-written code unchecked.
Minister Angie Motshekga set out how the department detects and responds to cyber threats against the military.
An internal web app built with an AI coding assistant left sensitive business and personal data open; the CEO has since responded.
Researchers found denial-of-service services on dark web markets priced like a cup of coffee, set against the cost of an attack to South African businesses.
The pathology group confirmed a breach. The threat actor's claim of 80 million stolen records, including medical aid details, is unverified.
The province plans a criminal case against the researcher who told it the app was exposing user information, rather than thanking him.
The Foschini Group said many systems at TFG London were still down after an incident detected on 11 October.