Skip to main content
NewThe State of Cybersecurity in East Africa 2026
Seraph Cyber
Blog

Perspectives from the Seraph Cyber team.

Governance, threat intelligence, cloud security, and what it actually takes to build a resilient security culture — written for security leaders and the boards they report to.

Explore Seraph CTITalk to Us
Isometric illustration of the word PHP on a glowing panel linked to code files, on a deep blue background
Threat IntelligenceLatest

PHP2Shell Patch Guide: How to Fix CVE-2026-109618 and CVE-2026-109619

Update PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart every PHP worker. Which versions are fixed, how to patch on common platforms, what to do on end-of-life PHP, and stopgaps while you update.

October 25, 20268 min read
Read Article
A padlock resting on a laptop keyboard, lit in red and green
Threat Intelligence
October 25, 202610 min read

Black October 2026: The Latest Cybersecurity Research Findings

PHP2Shell, Node2Shell, a firewall breach campaign, iPhone spyware and supply chain attacks: October 2026's key findings and what to do about each.

Read Article
Isometric illustration of the word PHP on a glowing panel linked to code files, on a deep blue background
Threat Intelligence
October 23, 20267 min read

PHP2Shell: Critical PHP Vulnerabilities Put Web Applications and Business Systems at Risk

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets unauthenticated attackers run code on PHP servers. What's affected, what to patch and how to check.

Read Article
A hand over a tablet streaming code, with a red unlocked shield and the word Cyberattack projected above the screen
Threat Intelligence
September 24, 20265 min read

Cyberattacks in Kenya in 2026: What You Need to Know

Kenya's connectivity has made it a major target for cybercriminals, and 2026 has shown how wide the threat has become. Here is what's happening, who is being targeted, and how to protect yourself.

Read Article
Board accountability: cybersecurity is governance, not IT
Governance
April 13, 20263 min read

Board accountability: cybersecurity is governance, not IT

Cybersecurity should not be treated as only an IT function. It is a governance issue that requires active board oversight, accountability, and strategic leadership.

Read Article
Why Cybersecurity Awareness Training Matters
Human Risk
March 19, 20262 min read

Why Cybersecurity Awareness Training Matters

Cybersecurity awareness training is essential because employees are often the first line of defense against cyber threats. It helps them recognize risks such as phishing and social engineering, handle sensitive data responsibly, and follow proper security practices.

Read Article
Cyber Risks CEOs and Boards Should Worry about this Quarter
Governance
January 8, 20264 min read

Cyber Risks CEOs and Boards Should Worry about this Quarter

For many years, cybersecurity was treated as a technical matter delegated to IT departments and external vendors. That assumption no longer holds. Today, cyber risk has become a material governance issue.

Read Article
Hospitals Under Pressure: Preparing Healthcare Systems for the 2026 Cyber Threat Landscape
Healthcare
December 24, 20254 min read

Hospitals Under Pressure: Preparing Healthcare Systems for the 2026 Cyber Threat Landscape

As healthcare systems become more digital, the margin for failure increasingly depends on technology rather than clinical skill alone.

Read Article
Why Buying More Software Won't Save You from a Cyberattack
Strategy
November 27, 20255 min read

Why Buying More Software Won't Save You from a Cyberattack

If you ask the average person to visualize "cybersecurity," they usually picture a guy in a hoodie sitting in a dark basement, furiously typing green code onto a black screen. It's a cinematic image, but it misses the point entirely.

Read Article
Beyond the Firewall: The 5 Core CISO Priorities for East Africa's 2025 Threat Landscape
Strategy
October 30, 20254 min read

Beyond the Firewall: The 5 Core CISO Priorities for East Africa's 2025 Threat Landscape

The digital success of East Africa has created a perfect storm. As nations like Kenya, Uganda, Tanzania, Rwanda, and Ethiopia become leading technology and financial hubs, they are now prime targets.

Read Article
5 Overlooked Cloud Security Gaps and How Seraph Cyber Can Fix Them
Cloud Security
October 11, 20254 min read

5 Overlooked Cloud Security Gaps and How Seraph Cyber Can Fix Them

Cloud adoption has accelerated dramatically across Kenya's business landscape, but security measures often lag behind. While organizations focus on obvious vulnerabilities, critical security gaps remain hidden.

Read Article
The State of Social Engineering in Cybersecurity
Threat Intelligence
October 9, 20255 min read

The State of Social Engineering in Cybersecurity

The cybersecurity landscape has witnessed a dramatic transformation in social engineering attacks from 2024 to 2025, characterized by unprecedented growth in AI-powered threats and a fundamental shift in attack methodologies.

Read Article
Supply Chain Security: The Hidden Cyber Risk Most Organizations Overlook
Third-Party Risk
3 min read

Supply Chain Security: The Hidden Cyber Risk Most Organizations Overlook

A significant proportion of major cyber incidents over the past decade have originated not from direct attacks on target organizations, but from vulnerabilities within their supply chains.

Read Article

Want security insight delivered straight to your inbox?

Tell us what your team is working through, and we'll point you to the right platform capability, service, or report.

Talk to UsExplore Threat Reports