Nigerian firms are confronting the highest volume of weekly cyberattacks in Africa, averaging 4,200 attacks per week. This figure far exceeds the continental average of 3,153 and is 60 % above the global average of 1,963 attacks per organisation, according to the newly released *African Perspectives on Cyber Security Report 2025* by Check Point Software Technologies Ltd.
The report highlights that cybercriminals are exploiting exposed identities and misconfigured systems to target critical sectors such as finance, energy, telecommunications, and government. Identity‑led intrusions, AI‑generated phishing campaigns, and multi‑vector ransomware are on the rise. Across the continent, distinct trends have emerged: Nigeria is grappling with business‑email compromise and cloud exploitation, while South Africa faces increasing ransomware, smishing, and botnet infections.
Kingsley Oseghale, Country Manager for West Africa at Check Point, notes that attackers are increasingly using AI to automate phishing, impersonation, and cloud exploitation. “AI has become part of the attack surface,” Oseghale said. “Attackers are using it to automate phishing and identity theft at scale. The only effective response is prevention‑first security that combines visibility, governance, and AI protection.”
The report stresses that as AI reshapes operations, cybersecurity must shift from a reactive stance to a predictive one. Oseghale adds that the real challenge is not merely adopting new technology but securing the trust that underpins it. Five major shifts shaping Africa’s cyber risk in 2025 are identified, including the evolution of traditional ransomware into data‑leak extortion, AI‑generated deception, and identity emerging as the new security perimeter.
Weak cybersecurity can now affect international market access under regulations such as the EU’s NIS2 Directive, making digital resilience an economic necessity. The report urges African businesses and governments to adopt prevention‑first security strategies—continuous risk assessment, regulatory readiness, and public‑private collaboration. By prioritising cybersecurity, organisations can protect themselves against the rising threat of cyberattacks and ensure continued operations in an increasingly digital economy.
Comments are closed for this story.