07 July , 2025

Fariba Bowen

4 minute read

The nation is grappling with a significant and evolving challenge: cybersecurity. This reality comes straight from the World Economic Forum’s (WEF) 2025 Global Cybersecurity Outlook report, which paints a picture of a “cyber-insecure” planet. South Africa consistently ranks as a highly targeted country on the African continent for cyberattacks.

A recent incident highlights this vulnerability, as a breach exploiting a flaw in Microsoft’s SharePoint servers affected several South African entities, including an organization in the automotive manufacturing industry, a university, and government departments. This attack, identified by cybersecurity firm Eye Security, saw hackers compromise approximately 400 organizations globally, with South Africa listed among the affected nations.

Attackers were able to gain unauthenticated remote code execution, allowing them to run their programs on compromised servers. This access indicates a potential to access file systems, internal configurations, steal cryptographic keys, and deploy persistent backdoors. Gaining such control over systems suggests a breach of data and operational integrity, demonstrating the damage these threats can cause. The WEF report emphasizes a surge in the frequency and sophistication of attacks, leveraging tools like Artificial Intelligence (AI). For South Africa, the stakes are high.

Understanding Our Cybersecurity Preparedness

Experts recently gathered at an information session hosted by iFundi in Sandton to analyze the WEF’s findings and their meaning for South Africa. The consensus was clear: the nation faces hurdles in its preparedness. The cybersecurity skills gap has become a national risk. With AI tools becoming accessible, cybercriminals use them to craft phishing scams, automate attacks, and evade detection. This makes defending systems difficult, even for seasoned professionals.

Where Attackers Come from and How They Learn

It is challenging to pinpoint the exact geographical origin of every cyberattack. Malicious actors use proxies and complex networks to hide their tracks. However, intelligence suggests that attacks targeting South Africa can originate from various parts of the globe, including Eastern Europe, Asia, and within the African continent. Motivations range from financial gain to industrial espionage.

As for how attackers gain their skills, it is a mix of pathways:

• Online Forums: These online spaces serve as hubs for sharing exploit techniques and trading stolen data. They offer a stream of information and tools.
• Malware-as-a-Service: The “dark web” provides access to malicious software and exploit kits, allowing individuals with less technical skill to launch attacks.
• Legitimate Knowledge: Many foundational hacking skills, such as understanding network protocols, are taught in cybersecurity courses or gained through IT professions. Attackers then use this knowledge for illicit purposes.
• Self-Taught: A portion of attackers are self-taught, driven by criminal intent, honing their abilities through experimentation and analyzing vulnerabilities.
• Generative AI: The WEF report highlights how AI tools now augment cybercriminal capabilities, enabling attacks like realistic phishing and automated vulnerability scanning.

A Call to Grow Cyber Talent

Shepherd Govere, a cybersecurity professional and facilitator for iFundi’s Cybersecurity Analyst programme, stressed the urgency of the situation. “The WEF report is not just a warning; it’s a roadmap,” Govere stated. “If we do not ramp up our efforts to train people to defend our digital infrastructure, we risk falling behind. Cybersecurity analysts are essential.”

iFundi’s Solution: Practical Skills Development

In response to this national need, iFundi has launched an 18-month Cybersecurity Analyst Qualification programme. It is designed to go beyond theory, focusing on providing practical, job-ready skills. The curriculum covers areas such as ethical hacking, cloud security, digital forensics, AI threat detection, and risk management. The program is accessible to high school graduates, those looking to switch careers, and IT professionals.

Kiran Jagganath, an IT technician at BCX and a program participant, can attest to its impact. “It taught me to think like a defender, to anticipate threats before they happen,” Jagganath reflected, describing a shift in his professional mindset.

The Evolving Digital Landscape and Its Impact

As South African businesses move toward digitization, the national cyber risk landscape expands. Cyberattacks are not isolated incidents; they are a constant threat. The cost of ignoring these dangers outweighs the investment required for prevention and defense.

The message from the WEF report is clear: we need to act now. South Africa must commit to building its cybersecurity capacity from the ground up. This means investment in training, making skills programs accessible, and cultivating a generation ready to take on this role.

Seizing the Opportunity for a Stronger Cyber Future

The talent exists. A few individuals are already signing up for these training programs. Others need encouragement to get started. The digital landscape is always changing, and South Africa needs proactive individuals to help secure its future.