{"id":651248,"date":"2026-06-02T11:58:52","date_gmt":"2026-06-02T09:58:52","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=651248"},"modified":"2026-06-02T11:59:29","modified_gmt":"2026-06-02T09:59:29","slug":"wave-of-supercharged-cyberattacks-will-hit-south-africa-within-5-months-expert-warns","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/651248-wave-of-supercharged-cyberattacks-will-hit-south-africa-within-5-months-expert-warns.html","title":{"rendered":"Wave of supercharged cyberattacks will hit South Africa within 5 months, expert warns"},"content":{"rendered":"\n<p>South Africa has at most five months to prepare for a wave of cyberattacks targeting local organisations driven by the increased popularity and performance of AI models.<\/p>\n\n\n\n<p>Justin Lee, vice president for Sub-Saharan Africa at international cybersecurity firm Palo Alto Networks, explained that advancements in AI are only going to increase the rate of these incidents.<\/p>\n\n\n\n<p>&#8220;We estimate a three-to-five-month window for organisations to get ahead of attackers before AI-driven exploits become more widespread,&#8221; he said.<\/p>\n\n\n\n<p>In the last three months, numerous South African companies have experienced cyber incidents, including <a href=\"https:\/\/mybroadband.co.za\/news\/security\/650222-pick-n-pay-delivery-app-breached-and-limited-shopper-credit-card-details-leaked-online.html\">Pick n Pay<\/a>, <a href=\"https:\/\/mybroadband.co.za\/news\/security\/641250-1-2tb-of-standard-bank-data-including-credit-card-details-stolen-and-leaked-online.html\">Standard Bank<\/a>, <a href=\"https:\/\/mybroadband.co.za\/news\/security\/641578-south-african-payment-processor-breached-source-code-allegedly-stolen.html\">Adumo<\/a> and <a href=\"https:\/\/mybroadband.co.za\/news\/security\/644182-large-technology-wholesaler-in-south-africa-hit-by-data-breach.html\">Esquire<\/a>.<\/p>\n\n\n\n<p>These companies were joined by major breaches involving the <a href=\"https:\/\/mybroadband.co.za\/news\/security\/633359-south-africas-richest-province-hacked-with-gigabytes-of-personal-data-on-sale-for-r420000.html\">Gauteng Provincial Government<\/a>, <a href=\"https:\/\/mybroadband.co.za\/news\/security\/636993-south-african-government-agency-with-sensitive-data-breached-in-r1-7-million-ransomware-attack.html\">Statistics South Africa<\/a>, and the <a href=\"https:\/\/mybroadband.co.za\/news\/security\/647594-anc-hit-by-data-breach-2-million-private-member-records-exposed.html\">African National Congress (ANC)<\/a>.<\/p>\n\n\n\n<p>Lee said that the capabilities of AI models, like Anthropic&#8217;s Mythos, are not overstated. &#8220;If anything, these models are more capable than first understood.&#8221;<\/p>\n\n\n\n<p>He said that the shift for cybercriminals already embracing AI was clear for South Africa, with the company now among the top 20 worldwide for cybercrime complaints as of last year.<\/p>\n\n\n\n<p>&#8220;AI-driven attack capability changes the economics for attackers. What once required skill, time, and resources can now be done faster, more cheaply and at a greater scale,&#8221; he said.<\/p>\n\n\n\n<p>&#8220;We have moved from a world where AI assists attackers to one where AI can drive attacks autonomously, and the pace of change means traditional security approaches need to evolve quickly.&#8221;<\/p>\n\n\n\n<p>Lee said Anthropic&#8217;s latest AI models were being used worldwide to find system vulnerabilities and prevent potential exploits.<\/p>\n\n\n\n<p>Palo Alto was a launch partner of Project Glasswing, Anthropic&#8217;s limited release of Mythos, which it said was its most powerful model yet for coding and development.<\/p>\n\n\n\n<p>Lee said Palo Alto has extended its testing to include advanced AI models from companies like Anthropic and OpenAI, including Claude Opus 4.7 and GPT 5.5 Cyber.<\/p>\n\n\n\n<p>&#8220;The scale of what these models can find is telling. Testing that previously took a full year can now be completed in days,&#8221; he said.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">AI making it 1,400% easier to find security flaws<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"675\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/05\/Claude-Mythos-Anthropic-1200x675.jpg\" alt=\"\" class=\"wp-image-646118\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/05\/Claude-Mythos-Anthropic-1200x675.jpg 1200w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/05\/Claude-Mythos-Anthropic-600x338.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/05\/Claude-Mythos-Anthropic-768x432.jpg 768w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/05\/Claude-Mythos-Anthropic-1536x864.jpg 1536w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/05\/Claude-Mythos-Anthropic.jpg 1600w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n\n<p>In one of the company&#8217;s most recent patches, Lee explained that the majority of security findings were discovered by these advanced AI models scanning code.<\/p>\n\n\n\n<p>He said they identified 75 security flaws across 26 vulnerabilities, compared to a typical monthly volume of fewer than 5. This represented a 1,400% increase in capability.<\/p>\n\n\n\n<p>Bijan Sanii, CEO of Canadian fraud detection provider Inetco, told MyBroadband that South African institutions, including its banks, should be concerned about the power of AI-driven cybercrime.<\/p>\n\n\n\n<p>&#8220;Not because Mythos is necessarily being used in fraud scams and bank fraud schemes today, but because it signals where the cyber threat environment is heading,&#8221; he said.<\/p>\n\n\n\n<p>&#8220;The issue is that AI is accelerating the discovery, testing and potential weaponisation of software weaknesses.&#8221;<\/p>\n\n\n\n<p>In May, a small team of cybersecurity researchers found an active, exploitable vulnerability in Apple&#8217;s famous Mac cybersecurity protection, which had never been breached.<\/p>\n\n\n\n<p>Apple reportedly spent five years building the protection system, which the researchers were able to find an exploit to breach in just one week.<\/p>\n\n\n\n<p>The advantage was Mythos, which helped the researchers accelerate their efforts and find methods to crack Apple&#8217;s hardware-assisted memory safety system.<\/p>\n\n\n\n<p>&#8220;Memory corruption remains the most common vulnerability class everywhere, including iOS and MacOS,&#8221; the researchers explained previously.<\/p>\n\n\n\n<p>&#8220;In security, if you can&#8217;t fully prevent something, you mitigate it by making exploitation more expensive.&#8221;<\/p>\n\n\n\n<p>They explained that part of their motivation was to test the limits of the best AI models in cybersecurity, especially in coding.<\/p>\n\n\n\n<p>The danger was that while cybersecurity experts used AI to find vulnerabilities before bad actors did, the other side of the fence was investing in AI too.<\/p>\n\n\n\n<p>Threat actors employed their own large language models to identify the most vulnerable processes and systems to attack.<\/p>\n\n\n\n<p>Check Point Software security engineering head for Africa, Ian van Rensburg, said that threat actors are now using AI as &#8220;mega hacking&#8221; assistants.<\/p>\n\n\n\n<p>&#8220;Hackers are using AI, and their attacks are now at the speed of a machine and not a human. These things get exploited very quickly,&#8221; he said.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>South Africa has at most five months to prepare for widespread cyberattacks targeting local organisations driven by the increased popularity and performance of AI models.<\/p>\n","protected":false},"author":341213,"featured_media":651411,"comment_status":"open","ping_status":"closed","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[92837,27],"tags":[69026,84095,105078,104783,6032,104784,103907,104674,77622,35318,5380,1851],"class_list":["post-651248","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-security","tag-adumo","tag-anthropic","tag-bijan-sanii","tag-check-point-software","tag-esquire","tag-ian-van-rensburg","tag-justin-lee","tag-mythos","tag-palo-alto","tag-palo-alto-networks","tag-pick-n-pay","tag-standard-bank"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/651248"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341213"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=651248"}],"version-history":[{"count":8,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/651248\/revisions"}],"predecessor-version":[{"id":651419,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/651248\/revisions\/651419"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/651411"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=651248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=651248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=651248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}