In the TCS+ episode sponsored by Arctic Wolf, sales manager Jason O'Hley and senior systems engineer Andre Den Hond discuss why South Africa bears the brunt of ransomware in Africa and what steps businesses can take.
Inter-Police Report Overview
Both speakers analyze an Interpol report stating that 92% of ransomware detections on the continent are in South Africa. O'Hley explains that factors such as the country's high degree of connectivity, large financial services sector, and significant middle market contribute to this situation, alongside a tactical rather than proactive approach to security.
Den Hond clarifies how agent AI systems can automate the attack chain, adapt when an exploit fails, and operate continuously, putting small and medium-sized enterprises directly under threat.
Additional Aspects of Cyber Threats
The speakers also highlight the reasons for the reduced time between vulnerability discovery and exploitation, the growing trend among attackers to steal data instead of encrypting it, and challenges with cyber insurance coverage.
The discussion covered the following points: why small and medium-sized enterprises supplying large companies become a loophole for attackers, including the recent hack of a group of South African insurance companies; what the hidden costs of a breach are, such as an average downtime of 22 days, loss of revenue, staff downtime, and reputational damage; a client example who postponed purchasing security measures due to cost and later suffered much more severely; methods for assessing the financial impact of cyber risks and the importance of the return on investment argument at the board level; a comparison of proactive versus reactive security and the lack of a universal solution; whether South African regulators are keeping pace with threat evolution, and the prospect of director liability; and the reason why establishing one's own 24/7 security operations center rarely makes financial sense.