Independent cyber-risk intelligence and access to credible expertise for South African leaders.
Interview · Identity and payments
South African banks lost around R2.4 billion to digital crime in 2025, and INTERPOL now links more than half of reported African cybercrime to AI. A conversation about what changes when attackers stop breaking in and start persuading — and where that leaves enrolment, recovery and the help desk.
Cybersecurity Radar
The headlines above are the surface. Here the full feed is searchable and filterable. Open any item for the complete briefing, which keeps three things apart: the reported fact, our assessment, marked as model inference, and the POPIA or Cybercrimes Act implication.
The Radar supports awareness. It does not predict incidents or replace a professional assessment.
Evidence strength
High Primary or official source — vendor advisory, regulator, statement from the affected organisation, CVE record. Named specifics.
Medium Credible reporting citing named sources, but not primary. Details incomplete or second-hand.
Low Single unconfirmed report, anonymous sources, attacker claims, or commentary without original findings.
This rates how well the reported fact is sourced — not how severe the incident is, and not our confidence in the assessment.
How it was checked
Automated Generated by our AI system from the linked report.
Every Radar item carries this badge, because it is true of every item. We do not read the Radar item by item before it is published; we check the ones our rules hold back — an item naming a person in connection with alleged wrongdoing, identifying a private victim, or making a claim that would seriously harm someone if it were wrong. Those are not published until a member of our team has read the source. Nothing on the item says who did that, because a badge on a handful of items would imply a grade of accuracy the others cannot have. Our own writing is in Insights, and it carries a name.
Priority
Priority is reading order for South African leadership — not the severity of the incident. An item becomes Priority 1 through a direct South African link, an effect on critical infrastructure, or an actively exploited vulnerability. A severe global incident with no local link can sit at Priority 2, and a smaller local one can sit at Priority 1.
If you need technical severity, read the reported fact and the original source. We do not publish a severity rating.
The three layers
Reported fact is documented in the source. Assessment is our inference. Recommended next step is a suggestion. They are never merged.
Insights for leaders
The Radar shows what is happening. Insights is where practitioners say what it means — expert interviews and executive briefings that turn a stream of incidents into decisions leadership can act on. Written in business language, by people who have done the work in South Africa, and always naming who is speaking and from what standing.
South African banks lost around R2.4 billion to digital crime in 2025, and INTERPOL now links more than half of reported African cybercrime to AI. A conversation about what changes when attackers stop breaking in and start persuading — and where that leaves enrolment, recovery and the help desk.
Read the interviewSix developments from the 713 reports the Radar tracked between 6 and 18 October 2026. The most active sectors were Technology & Software, Cybersecurity and Finance & Insurance.
ReadSix developments from the 868 reports the Radar tracked between 18 October and 1 November 2026. The most active sectors were Technology & Software, Finance & Insurance and Cybersecurity.
ReadAs Czechia and South Africa close the sixth session of their Joint Committee on Economic Cooperation, the Czech Embassy’s head of economic and commercial affairs in Pretoria on what a deeper partnership looks like past the trade figures — and where cybersecurity fits into it.
ReadFortnightly Intelligence Brief
The incidents that touched South Africa, what they mean and the next step worth taking.
Summary of the latest issue: 18 October – 1 November 2026The South African cyber landscape
Alongside the Radar, the association is building a living index of the people and organisations that shape cybersecurity in South Africa and beyond — extracted continuously from the same reporting, not compiled by hand.
Figures come from the live index and update on their own. The full index is an internal research tool; what is public here is its shape and size.
870 South African and 940 global — executives, regulators and public figures.
1 116 South African and 2 424 global, each mapped to one of 13 sectors — finance, telecoms, energy, healthcare and more.
Every entity tied back to the report that surfaced it.
Where the risk actually sits
Each report is linked to the organisations it names, and those organisations carry a sector. That turns a stream of headlines into a question you can answer: which parts of the South African economy are drawing the most high-priority reporting right now.
11
priority 1 security reports in the last 90 days named Finance & Insurance — more than any other sector, across the 81 organisations we currently track in it
Member network
When we point a business leader towards expertise, it comes from this network. Membership is not advertising space: it will carry obligations and periodic review under our Provider Membership Standard.
Membership is a trust signal — not a guarantee of performance and not a regulatory approval. Payment does not determine which firms receive an enquiry.
Looking for help rather than offering it? Find credible expertise
For cybersecurity providers
Members
Payment security specialist: secure EMV card data preparation, HSMs and authentication for banks and card issuers.
Barnes Smart Solutions is an international technology company specialising in payment security. Its flagship P3 platform lets banks, card issuers, card manufacturers and personalisation bureaus prepare EMV card data in-house, with the cryptographic keys behind every card protected by hardware security modules. Barnes also supplies and supports Thales payShield HSMs, instant card issuance, and EMV, NFC and mobile payment testing. It has extended its portfolio into passwordless authentication and security for IoT and edge devices. The company is led by Managing Director Susan Higgo, who is based in South Africa.
barnessmart.com
Digital identity and payments software house: passwordless authentication, electronic signatures and payment technology for banks and the public sector.
MONET+ is a Czech software house that has been building digital identity and payment technology since 1996. Its ProID platform protects employees' digital identities: smart cards and a mobile app provide passwordless multi-factor authentication, qualified electronic signatures and physical access, backed by certificate lifecycle management. MONET+ also supplies the authentication and signing middleware for the Czech electronic ID card, as well as payment technology for banks and transport operators. Its clients include major European banks and public institutions. In South Africa, ProID is delivered and implemented by MONET+'s partner Barnes Smart Solutions. The company is led by CEO Jan Vavrys and is headquartered in Zlín, Czech Republic.
monetplus.cz
What we do
The association starts from independent monitoring of the cyber landscape, not a product catalogue — then builds context, understanding and connections around it.
01
Continuous cyber intelligence
Our Cybersecurity Radar monitors global and South African reporting around the clock, triages each development by business priority and turns it into a plain-language summary. It is running live on this page.
See the Radar02
POPIA & Cybercrimes Act context
Every item on the Radar shows whether — and how — the reported development connects to South African obligations under POPIA and the Cybercrimes Act, so leaders see not only what happened, but what it may mean for them. General information, not legal advice.
Open any Radar item03
Independent expertise & network
We are building an independent network to connect defined business needs with cybersecurity firms admitted and reviewed under our Provider Membership Standard and experienced practitioners — locally and internationally, free of any single vendor's interest.
About the networkTrust & independence
Cybersecurity Association South Africa is a privately operated, independent industry platform run by bodhi.style s.r.o., a Czech company. We are not part of, endorsed by or affiliated with the South African Government, a regulator, law-enforcement agency or any public authority, unless a specific collaboration is expressly stated. We are not an association or professional body; provider membership is a contractual programme. Membership, referral fees and sponsorship do not buy editorial treatment or selection for an introduction. We disclose material relationships and label AI-generated content.
Members and partners may pay membership, sponsorship or referral fees. These relationships are disclosed where relevant. They do not purchase favourable editorial conclusions or guarantee recommendation.
Information published on this site is for general educational purposes. It is not legal advice, regulatory approval or a substitute for an assessment of an organisation's specific circumstances.
A practical starting point
Cyber risk can interrupt operations, expose personal information and damage trust. We make the subject manageable, so leadership teams can focus attention and investment where they matter most.
Where to start
Even if the question is not yet fully formed.
Find credible expertiseConfidential. Practical. No technical preparation required.