The Dark Side of the Digital Divide: Cybersecurity Threats in African Higher Education

The rapid digital transformation of African education has brought unprecedented opportunities, but also significant cybersecurity challenges. African higher education institutions (HEIs) are increasingly targeted by cybercriminals, with sensitive data, open systems, and limited resources making them vulnerable. Incidents like the theft of student records and hacking of degree platforms demonstrate the gravity of these threats.

Key Takeaways:

• African HEIs are increasingly targeted by cybercriminals, with education being the third most targeted sector globally (Microsoft's Cyber Signals report).
• Universities hold vast amounts of sensitive data, including student records, research, and intellectual property, making them attractive targets for cybercriminals.
• Limited resources, legacy systems, and a lack of awareness among students, educators, and administrators exacerbate cybersecurity challenges.
• Examples of cyber threats in African education include social engineering and spoofing attacks, with some institutions being locked out of their data for over a year.
• Strategies for strengthening cybersecurity include establishing clear policies, providing regular training, implementing secure access management, and leveraging AI and advanced technologies.
• The importance of human risk management, focusing on security awareness training and real-time interventions, cannot be overstated.
• A collective effort involving institutions, governments, cybersecurity experts, and technology providers is crucial to safeguard the future of education in Africa.

Statistics:

• Education is the third most targeted sector globally, with Africa being a particularly vulnerable region (Microsoft's Cyber Signals report).
• Over 99.9% of hacking risks can be reduced by using phishing-resistant MFA (NIST guidelines).
• The KwaZulu-Natal Department of Education reported a warning against a cybercriminal scamming job seekers by falsely promising teaching posts in exchange for money and using photos with officials to appear legitimate (APO Group).
• Link-based ransomware attacks have been used to victimize universities in Mpumalanga and schools in the Eastern Cape, with some institutions being locked out of their data for over a year (APO Group).

Sources:

• Microsoft's Cyber Signals report
• APO Group
• National Institute of Standards and Technology (NIST)
• KnowBe4 (www.KnowBe4.com)
• Johannesburg, South Africa - By Anna Collard, SVP Content Strategy & Evangelist KnowBe4 Africa