EACA Summit 2026 was July 2–3, 2026 — see you next year!
East Africa Cyber & AI Summit
Press Center

Latest Updates & Announcements.

Program updates, speaker news, partnerships, and registration milestones for East Africa Cyber & AI Summit 2026.

Back to home

Latest story

41 updates

Security Briefing | July 15, 2026 - Microsoft Patches Record 622 Flaws Including Two Exploited Zero-Days, SonicWall SMA 1000 Zero-Days Actively Exploited, AsyncAPI npm Packages Deliver Botnet Malware
SECURITY BRIEFING

JULY 15, 2026

Security Briefing | July 15, 2026 - Microsoft Patches Record 622 Flaws Including Two Exploited Zero-Days, SonicWall SMA 1000 Zero-Days Actively Exploited, AsyncAPI npm Packages Deliver Botnet Malware

Microsoft's July 2026 Patch Tuesday is the largest on record, addressing 622 vulnerabilities including two actively exploited zero-days in Active Directory and SharePoint Server. SonicWall warned of active exploitation of two SMA 1000 zero-days including CVE-2026-15409 (CVSS 10.0), an SSRF flaw potentially enabling remote code execution. Four compromised npm packages in the AsyncAPI namespace were found distributing a multi-stage botnet loader.

Read article
Security Briefing | July 14, 2026 - US and Allies Warn of Russian Router Attacks on Critical Infrastructure, Forg365 PhaaS Targets Microsoft 365, Jscrambler Supply Chain Attack Scope Expands
SECURITY BRIEFING

JULY 14, 2026

Security Briefing | July 14, 2026 - US and Allies Warn of Russian Router Attacks on Critical Infrastructure, Forg365 PhaaS Targets Microsoft 365, Jscrambler Supply Chain Attack Scope Expands

US and allied cybersecurity agencies issued a joint advisory warning of Russian APT groups actively compromising poorly secured routers in critical infrastructure networks. A new phishing-as-a-service platform called Forg365 is targeting Microsoft 365 using device code phishing and adversary-in-the-middle techniques, sold on Telegram for $400 per month. Additional versions of Jscrambler npm packages have been confirmed compromised in the supply chain attack first reported July 12.

Read article
Security Briefing | July 13, 2026 - Two CVSS 10.0 Joomla Extension Zero-Days in KEV, Misconfigured Server Exposes Three Evilginx Phishing Ops, EU Sanctions Russian Intelligence Officers
SECURITY BRIEFING

JULY 13, 2026

Security Briefing | July 13, 2026 - Two CVSS 10.0 Joomla Extension Zero-Days in KEV, Misconfigured Server Exposes Three Evilginx Phishing Ops, EU Sanctions Russian Intelligence Officers

CISA added two maximum-severity Joomla extension zero-days (iCagenda CVE-2026-48939 and Balbooa Forms, both CVSS 10.0) to its KEV catalog following active exploitation. A misconfigured Python web server with directory listing exposed an attacker's full Evilginx toolkit, leading to the discovery of three Microsoft 365 phishing operations. The European Union has sanctioned Russian intelligence officers responsible for a years-long cyber espionage campaign targeting governments and critical infrastructure.

Read article
Security Briefing | July 12, 2026 - jscrambler npm Package Compromised in Supply Chain Attack, Pakistani Police Portals Targeted in Espionage Campaign, Ghost Accounts Abuse GitHub API for Mass Recon
SECURITY BRIEFING

JULY 12, 2026

Security Briefing | July 12, 2026 - jscrambler npm Package Compromised in Supply Chain Attack, Pakistani Police Portals Targeted in Espionage Campaign, Ghost Accounts Abuse GitHub API for Mass Recon

The jscrambler npm package version 8.14.0 was compromised with a preinstall hook dropping a Rust-based infostealer on Windows, macOS, and Linux, detected by Socket just six minutes after publication. Suspected China and India-aligned threat actors spent over two years compromising Balochistan Police servers, exfiltrating sensitive criminal and citizen records. Separately, ghost accounts are actively abusing the GitHub API to map organizations, repositories, and members in what appears to be coordinated pre-attack reconnaissance.

Read article
Security Briefing | July 11, 2026 - Critical Zimbra XSS Flaw Executes Code via Email, Progress ShareFile Storage Controllers Under Active Threat, Silver Fox Deploys Rust-Based MODBEACON RAT
SECURITY BRIEFING

JULY 11, 2026

Security Briefing | July 11, 2026 - Critical Zimbra XSS Flaw Executes Code via Email, Progress ShareFile Storage Controllers Under Active Threat, Silver Fox Deploys Rust-Based MODBEACON RAT

Zimbra disclosed a critical stored XSS vulnerability in the Classic Web Client allowing crafted emails to execute arbitrary code in user sessions. Progress Software issued an urgent warning instructing ShareFile customers to immediately shut down Storage Zone Controllers due to a credible external security threat still under investigation. China-linked Silver Fox group is deploying MODBEACON, a Rust-based RAT using gRPC streaming for encrypted C2 communication, targeting cryptocurrency wallet users.

Read article
Security Briefing | July 10, 2026 - Unpatched XQUIC DoS Flaw, GigaWiper Combines Wiper and Ransomware, Vishing Campaign Targets Microsoft 365 Passkey Enrollment
SECURITY BRIEFING

JULY 10, 2026

Security Briefing | July 10, 2026 - Unpatched XQUIC DoS Flaw, GigaWiper Combines Wiper and Ransomware, Vishing Campaign Targets Microsoft 365 Passkey Enrollment

An unpatched denial-of-service vulnerability in Alibaba's XQUIC library (XRING) allows any remote client to crash HTTP/3 servers with just 260 bytes of legitimate traffic. Microsoft analyzed GigaWiper, a destructive Windows backdoor combining disk wiping, multi-pass wiping, and fake ransomware into one platform. Okta warns of vishing attacks by threat actor O-UNC-066 tricking Microsoft 365 users into enrolling fake Entra passkeys.

Read article
Security Briefing | July 09, 2026 - Microsoft Finally Patches RoguePlanet Defender Flaw, GodDamn Ransomware Disables Defenses via Kernel Driver, Six AI Coding Tools Vulnerable to GhostApproval Attack
SECURITY BRIEFING

JULY 9, 2026

Security Briefing | July 09, 2026 - Microsoft Finally Patches RoguePlanet Defender Flaw, GodDamn Ransomware Disables Defenses via Kernel Driver, Six AI Coding Tools Vulnerable to GhostApproval Attack

Microsoft has released a patch for CVE-2026-50656 (CVSS 7.8), the RoguePlanet Microsoft Defender privilege escalation flaw first disclosed publicly in June 2026. A new ransomware family called GodDamn uses the PoisonX kernel driver to disable endpoint security software before encrypting, assessed as a Beast ransomware rebrand. Wiz researchers disclosed GhostApproval, a symlink attack affecting six major AI coding assistants including Claude Code, Amazon Q Developer, and Cursor.

Read article
Security Briefing | July 08, 2026 - CISA Adds ColdFusion CVSS 10.0 to KEV With July 10 Deadline, Unpatched GhostLock Flaw Enables Root and Container Escape, China UAT-7810 Deploys LONGLEASH Malware
SECURITY BRIEFING

JULY 8, 2026

Security Briefing | July 08, 2026 - CISA Adds ColdFusion CVSS 10.0 to KEV With July 10 Deadline, Unpatched GhostLock Flaw Enables Root and Container Escape, China UAT-7810 Deploys LONGLEASH Malware

CISA added four actively exploited vulnerabilities to its KEV catalog including Adobe ColdFusion (CVE-2026-48282, CVSS 10.0), Langflow, and two Joomla extensions, with federal agencies required to patch by July 10. Researchers disclosed GhostLock (CVE-2026-43499), a 15-year-old unpatched Linux kernel flaw allowing any logged-in user to gain root and escape containers across all major distributions. Meanwhile, Chinese APT UAT-7810 is expanding its ORB network by deploying new LONGLEASH malware against internet-facing networking devices.

Read article
Security Briefing | July 07, 2026 - CVSS 10.0 Adobe ColdFusion Flaw Exploited, 16-Year-Old KVM VM Escape Bug, Iran Deploys Cavern C2 Against Israel
SECURITY BRIEFING

JULY 7, 2026

Security Briefing | July 07, 2026 - CVSS 10.0 Adobe ColdFusion Flaw Exploited, 16-Year-Old KVM VM Escape Bug, Iran Deploys Cavern C2 Against Israel

Hackers are actively exploiting CVE-2026-48282, a CVSS 10.0 Adobe ColdFusion flaw allowing unauthenticated remote code execution. A 16-year-old Linux KVM hypervisor vulnerability (CVE-2026-53359, dubbed Januscape) allows guest VMs to escape to the host on both Intel and AMD systems, with a public PoC already available. Meanwhile, an Iranian MOIS-linked group is deploying a new modular C2 framework called Cavern against Israeli IT providers and government organizations.

Read article
Security Briefing | July 06, 2026 - China-Nexus Campaign Hits Indian Taxpayers with DcRAT, New Cross-Platform QuimaRAT MaaS, Bad Epoll PoC Now Public
SECURITY BRIEFING

JULY 6, 2026

Security Briefing | July 06, 2026 - China-Nexus Campaign Hits Indian Taxpayers with DcRAT, New Cross-Platform QuimaRAT MaaS, Bad Epoll PoC Now Public

A China-linked threat cluster dubbed Operation DragonReturn is using spear-phishing emails impersonating India's Income Tax Department to deliver the DcRAT remote access trojan. Researchers identified QuimaRAT, a new Java-based cross-platform RAT sold as a service for $150 to $1,200 targeting Windows, Linux, and macOS. Meanwhile a public proof-of-concept exploit has been released for the Linux Bad Epoll privilege escalation vulnerability, significantly raising the risk for unpatched systems.

Read article
Security Briefing | July 05, 2026 - JadePuffer AI Ransomware Update: New Details Confirm Autonomous Data Exfiltration
SECURITY BRIEFING

JULY 5, 2026

Security Briefing | July 05, 2026 - JadePuffer AI Ransomware Update: New Details Confirm Autonomous Data Exfiltration

Additional reporting on JadePuffer, the first documented ransomware operation fully executed by an AI agent, confirms the LLM autonomously performed reconnaissance, lateral movement, data exfiltration, and encryption without any human intervention, marking a landmark shift in automated cyber threats.

Read article
Security Briefing | July 04, 2026 - Critical Linux 'Bad Epoll' Flaw Enables Root Access, Seven Unpatched FatFs Vulnerabilities, North Korea Publishes 108 Malicious Packages
SECURITY BRIEFING

JULY 4, 2026

Security Briefing | July 04, 2026 - Critical Linux 'Bad Epoll' Flaw Enables Root Access, Seven Unpatched FatFs Vulnerabilities, North Korea Publishes 108 Malicious Packages

A newly disclosed Linux kernel vulnerability (CVE-2026-46242) dubbed "Bad Epoll" allows unprivileged users to gain root access on Linux desktops, servers, and Android devices. Security firm runZero disclosed seven unpatched vulnerabilities in the FatFs filesystem library used in millions of embedded devices including security cameras, drones, and industrial controllers. Meanwhile, North Korean threat actors linked to the Contagious Interview campaign have published 108 malicious packages and browser extensions across npm, Packagist, Go, and Chrome.

Read article
Security Briefing | July 02, 2026 - SharePoint RCE Added to CISA KEV, FortiBleed Linked to Ransomware Groups, First AI Agent-Driven Attack Observed
SECURITY BRIEFING

JULY 2, 2026

Security Briefing | July 02, 2026 - SharePoint RCE Added to CISA KEV, FortiBleed Linked to Ransomware Groups, First AI Agent-Driven Attack Observed

CISA has added a high-severity SharePoint RCE (CVE-2026-45659, CVSS 8.8) to its Known Exploited Vulnerabilities catalog following confirmed active exploitation. The FortiBleed credential theft campaign has now been attributed to INC and Lynx ransomware operations, confirming a direct pipeline from mass credential harvesting to ransomware deployment. Sysdig researchers have also documented JADEPUFFER, the first ransomware attack executed entirely by an AI agent across a full kill chain.

Read article
Security Briefing | July 01, 2026 - Azure CLI Hit by 81M Password Spray Attempts, Citrix Patches Six NetScaler Flaws, 900+ Oracle EBS Instances Still Exposed
SECURITY BRIEFING

JULY 1, 2026

Security Briefing | July 01, 2026 - Azure CLI Hit by 81M Password Spray Attempts, Citrix Patches Six NetScaler Flaws, 900+ Oracle EBS Instances Still Exposed

A massive automated password spray campaign targeting Azure CLI made over 81 million login attempts and compromised at least 78 accounts between June 12-26. Citrix released patches for six NetScaler vulnerabilities including an HTTP/2 Bomb attack vector and a CitrixBleed-style information disclosure flaw. Meanwhile, over 900 Oracle E-Business Suite instances remain exposed to ongoing active exploitation of a critical unauthenticated RCE flaw.

Read article
Security Briefing | June 30, 2026 - CVSS 10.0 SimpleHelp Flaw Deploys New Malware, Ransomware Gangs Hit Windows BlueHammer, Oracle E-Business Suite Under Attack
SECURITY BRIEFING

JUNE 30, 2026

Security Briefing | June 30, 2026 - CVSS 10.0 SimpleHelp Flaw Deploys New Malware, Ransomware Gangs Hit Windows BlueHammer, Oracle E-Business Suite Under Attack

Attackers are exploiting a maximum-severity SimpleHelp authentication bypass (CVE-2026-48558, CVSS 10.0) to deploy two previously undocumented malware families, Djinn Stealer and TaskWeaver. CISA confirms ransomware gangs are now weaponizing the Windows BlueHammer Microsoft Defender privilege escalation flaw. Meanwhile, a critical Oracle E-Business Suite vulnerability (CVE-2026-46817, CVSS 9.8) is being actively exploited to take over Oracle Payments instances without authentication.

Read article
Security Briefing | June 29, 2026 - Critical libssh2 PoC Released, Microsoft Pulls 119 Malicious Edge Extensions, KDDI Breach Exposes 14.2M Email Logins
SECURITY BRIEFING

JUNE 29, 2026

Security Briefing | June 29, 2026 - Critical libssh2 PoC Released, Microsoft Pulls 119 Malicious Edge Extensions, KDDI Breach Exposes 14.2M Email Logins

A public proof-of-concept exploit is now available for CVE-2026-55200, a critical libssh2 vulnerability (CVSS 9.2) that allows a malicious SSH server to compromise a connecting client without user interaction. Microsoft removed 119 Edge extensions hiding malware via steganography in images and fonts as part of a campaign active since 2021. Meanwhile, Japanese telecom KDDI disclosed a breach exposing up to 14.2 million email logins across six ISPs.

Read article
Security Briefing | June 28, 2026 - Russian Intelligence Steals Messaging Credentials via Fake Support Texts, AI Coding Agents Tricked by Clean GitHub Repos
SECURITY BRIEFING

JUNE 28, 2026

Security Briefing | June 28, 2026 - Russian Intelligence Steals Messaging Credentials via Fake Support Texts, AI Coding Agents Tricked by Clean GitHub Repos

The Security Service of Ukraine and the FBI have uncovered a long-running Russian intelligence campaign using fake support text messages to steal messaging credentials from government officials, military personnel, and activists across Ukraine, Europe, and the US. Separately, a new attack technique uses seemingly clean GitHub repositories to trick AI coding agents into executing malware that evades scanners and human reviewers.

Read article
Security Briefing | June 27, 2026 - Russian Hackers Target Signal Recovery Keys, Linux Kernel pedit COW Flaw, Amazon Q Developer Credential Theft
SECURITY BRIEFING

JUNE 27, 2026

Security Briefing | June 27, 2026 - Russian Hackers Target Signal Recovery Keys, Linux Kernel pedit COW Flaw, Amazon Q Developer Credential Theft

The FBI and CISA warn that Russian intelligence-linked phishing campaigns now target Signal Backup Recovery Keys, enabling full account takeover that survives a password change. A new Linux kernel flaw (CVE-2026-46331), nicknamed "pedit COW," allows local privilege escalation to root with a public exploit already available. Meanwhile, a high-severity Amazon Q Developer vulnerability (CVE-2026-12957) could let malicious repositories steal cloud credentials.

Read article
Security Briefing | June 26, 2026 - Critical Linux Kernel Flaw Grants Root Access, Miasma Malware Hits Go Ecosystem, Russian APT Deploys STOCKSTAY Backdoor
SECURITY BRIEFING

JUNE 26, 2026

Security Briefing | June 26, 2026 - Critical Linux Kernel Flaw Grants Root Access, Miasma Malware Hits Go Ecosystem, Russian APT Deploys STOCKSTAY Backdoor

A critical Linux kernel privilege escalation vulnerability (CVE-2026-43503, CVSS 8.8) now has a public exploit walkthrough allowing local users to gain root access. The Miasma malware family has expanded its supply chain attack from npm into the Go ecosystem, abusing GitHub Actions workflows. Meanwhile, Russian state-sponsored group Turla has deployed a new .NET backdoor called STOCKSTAY against Ukrainian government and military targets.

Read article
Security Briefing | June 25, 2026 - Cisco SD-WAN Zero-Day Hits Root Access, Critical Lantronix Flaw Exploited, Operation Endgame Recovers 27M Credentials
SECURITY BRIEFING

JUNE 25, 2026

Security Briefing | June 25, 2026 - Cisco SD-WAN Zero-Day Hits Root Access, Critical Lantronix Flaw Exploited, Operation Endgame Recovers 27M Credentials

Threat actors exploited a Cisco Catalyst SD-WAN zero-day (CVE-2026-20245) for at least two months before public disclosure, gaining root access and creating rogue accounts. CISA has flagged active exploitation of a critical Lantronix EDS5000 flaw threatening OT environments. Meanwhile, a coordinated law enforcement operation disrupted Amadey and StealC malware infrastructure, recovering 27 million stolen credentials.

Read article
Security Briefing | June 24, 2026 - Cisco SSRF Flaw Exploited, FortiBleed Escalates to 430,000 Firewalls, New Mistic Backdoor Tied to Ransomware
SECURITY BRIEFING

JUNE 24, 2026

Security Briefing | June 24, 2026 - Cisco SSRF Flaw Exploited, FortiBleed Escalates to 430,000 Firewalls, New Mistic Backdoor Tied to Ransomware

A critical SSRF vulnerability in Cisco Unified Communications Manager is under active exploitation following public proof-of-concept release. The FortiBleed campaign has escalated dramatically, now linked to over 430,000 compromised FortiGate firewalls and 110 million harvested credentials. Meanwhile, a new backdoor called Mistic has been tied to ransomware access broker KongTuke, which feeds access to groups including Qilin, Akira, and Black Basta.

Read article
Security Briefing | June 23, 2026 - Malicious npm RAT, WhatsApp Phishing Campaign, Squidbleed Leaks Cleartext Credentials
SECURITY BRIEFING

JUNE 23, 2026

Security Briefing | June 23, 2026 - Malicious npm RAT, WhatsApp Phishing Campaign, Squidbleed Leaks Cleartext Credentials

Three malicious npm packages posing as PostCSS tools have delivered a Windows RAT to over 1,000 downloads combined. A WhatsApp-based phishing campaign is tricking users across multiple countries into installing legitimate remote access software. Meanwhile, a 29-year-old Squid proxy vulnerability called Squidbleed can leak cleartext credentials and session tokens.

Read article
Security Briefing | June 22, 2026 - New AryStinger Botnet Infects 4,300+ Legacy Routers for Reconnaissance
SECURITY BRIEFING

JUNE 22, 2026

Security Briefing | June 22, 2026 - New AryStinger Botnet Infects 4,300+ Legacy Routers for Reconnaissance

A new malware family called AryStinger has compromised over 4,300 outdated D-Link routers, building them into a distributed proxy network used for reconnaissance rather than traditional DDoS attacks. The infection count is still rising.

Read article
Security Briefing | June 21, 2026 - New Prinz Eugen Ransomware Skips Ransom Notes, Mastra Supply Chain Attack Linked to North Korea
SECURITY BRIEFING

JUNE 21, 2026

Security Briefing | June 21, 2026 - New Prinz Eugen Ransomware Skips Ransom Notes, Mastra Supply Chain Attack Linked to North Korea

A new ransomware variant called Prinz Eugen is encrypting recently modified files first and leaving no ransom note, complicating detection. Separately, Microsoft has attributed the Mastra AI npm supply chain attack, which compromised over 140 packages, to North Korean state-sponsored group Sapphire Sleet (BlueNoroff).

Read article
Security Briefing | June 20, 2026 - FortiBleed Update: Russian Attribution Confirmed, WordPress Plugin Exploited, Unpatchable Apple Exploit Surfaces
SECURITY BRIEFING

JUNE 20, 2026

Security Briefing | June 20, 2026 - FortiBleed Update: Russian Attribution Confirmed, WordPress Plugin Exploited, Unpatchable Apple Exploit Surfaces

The FortiBleed campaign has now been attributed to Russian-speaking threat actors with 86,644 confirmed compromised FortiGate devices. Active exploitation of CVE-2026-4020 in the Gravity SMTP WordPress plugin is exposing API keys and OAuth tokens on roughly 100,000 sites. Meanwhile, researchers published an unpatchable hardware exploit, usbliter8, that breaks SecureROM on Apple A12 and A13 chips.

Read article
Security Briefing | June 19, 2026 - Splunk RCE Actively Exploited, FortiBleed Hits 86K Devices, Klue OAuth Breach Exposes Salesforce Data
SECURITY BRIEFING

JUNE 19, 2026

Security Briefing | June 19, 2026 - Splunk RCE Actively Exploited, FortiBleed Hits 86K Devices, Klue OAuth Breach Exposes Salesforce Data

CISA orders federal agencies to patch an actively exploited unauthenticated RCE in Splunk Enterprise (CVE-2026-20253) by June 21, 2026. The FortiBleed credential leak grows to approximately 86,000 Fortinet devices, nearly half of all internet-accessible firewalls and VPNs. A supply chain breach of Klue's OAuth integration exposes Salesforce CRM data across multiple organizations, including cybersecurity firms Huntress and Recorded Future.

Read article
Security Briefing | June 18, 2026 - Microsoft Defender Zero-Day, FortiBleed Leaks 73K VPN Credentials, ShapedPlugin WordPress Supply Chain Attack
SECURITY BRIEFING

JUNE 18, 2026

Security Briefing | June 18, 2026 - Microsoft Defender Zero-Day, FortiBleed Leaks 73K VPN Credentials, ShapedPlugin WordPress Supply Chain Attack

Microsoft confirms an actively exploited privilege escalation zero-day in Microsoft Defender (CVE-2026-50656, CVSS 7.8) with no patch yet available. The FortiBleed leak exposes VPN credentials for over 73,000 Fortinet firewall devices worldwide. A supply chain attack against ShapedPlugin distributes malicious WordPress plugin updates through official channels to paying customers.

Read article
Security Briefing | June 17, 2026 - CVSS 10.0 Joomla Flaw Exploited, JetBrains Plugins Steal AI Keys, 144 npm Packages Compromised
SECURITY BRIEFING

JUNE 17, 2026

Security Briefing | June 17, 2026 - CVSS 10.0 Joomla Flaw Exploited, JetBrains Plugins Steal AI Keys, 144 npm Packages Compromised

CISA adds a max-severity Joomla JCE plugin flaw (CVE-2026-48907, CVSS 10.0) to its KEV catalog with a federal patching deadline of June 19, 2026. A coordinated campaign plants 15 malicious plugins on the JetBrains Marketplace to steal AI API keys from developers. Meanwhile, a supply chain attack compromises 144 npm packages in the Mastra ecosystem via a hijacked contributor account.

Read article
Security Briefing | June 16, 2026 - Fortinet FortiSandbox Exploited, China Expands SprySOCKS to Windows, CISA Flags LiteSpeed Flaw
SECURITY BRIEFING

JUNE 16, 2026

Security Briefing | June 16, 2026 - Fortinet FortiSandbox Exploited, China Expands SprySOCKS to Windows, CISA Flags LiteSpeed Flaw

Threat actors are actively exploiting three Fortinet FortiSandbox vulnerabilities including a critical path traversal flaw (CVE-2026-39813, CVSS 9.1). China-linked espionage groups have expanded the SprySOCKS backdoor to Windows, targeting government organizations in at least four countries. CISA has added a LiteSpeed cPanel privilege escalation flaw to its KEV catalog with a patching deadline of June 18, 2026.

Read article
Security Briefing | June 15, 2026 - PAN-OS VPN Exploited, FBI Dismantles $1.9B Phishing Ring, WordPress Supply-Chain Attack
SECURITY BRIEFING

JUNE 15, 2026

Security Briefing | June 15, 2026 - PAN-OS VPN Exploited, FBI Dismantles $1.9B Phishing Ring, WordPress Supply-Chain Attack

Active exploitation of a PAN-OS GlobalProtect VPN authentication bypass flaw puts organizations at immediate risk. The FBI, Google, and Black Lotus Labs dismantled a Chinese AI-powered phishing-as-a-service platform responsible for $1.9 billion in losses. Meanwhile, WordPress plugins PushEngage, OptinMonster, and TrustPulse were backdoored via tampered JavaScript files.

Read article
Security Briefing | June 14, 2026 - Critical Splunk RCE, Chinese Hackers Spy for a Decade, Insider Threat Sentenced
SECURITY BRIEFING

JUNE 14, 2026

Security Briefing | June 14, 2026 - Critical Splunk RCE, Chinese Hackers Spy for a Decade, Insider Threat Sentenced

A critical unauthenticated RCE vulnerability in Splunk Enterprise (CVE-2026-20253, CVSS 9.8) poses immediate risk to defenders. Chinese state-sponsored hackers maintained persistent access to an isolated network for a decade by hijacking authentication flows. Additionally, a former school district IT employee was sentenced to 21 months for a prolonged cyberattack against a former employer.

Read article
Security Briefing | June 13, 2026 - Anthropic AI Models Restricted, 400+ Arch Linux Packages Hijacked, China-Linked Linux Backdoor Persists for a Decade
SECURITY BRIEFING

JUNE 13, 2026

Security Briefing | June 13, 2026 - Anthropic AI Models Restricted, 400+ Arch Linux Packages Hijacked, China-Linked Linux Backdoor Persists for a Decade

The U.S. government has ordered Anthropic to suspend access to its most advanced AI models for foreign nationals, marking a major development in AI export controls. At the same time, attackers compromised more than 400 Arch Linux AUR packages to distribute credential-stealing malware and an eBPF rootkit. In another significant discovery, security researchers uncovered a China-linked operation that maintained covert access to Linux systems for nearly a decade by backdooring PAM and OpenSSH authentication components.

Read article
Security Briefing | June 12, 2026 - Oracle PeopleSoft Zero-Day Exploited, CISA Orders Emergency Ivanti Patching, Europol Dismantles Crypto-Laundering Network
SECURITY BRIEFING

JUNE 12, 2026

Security Briefing | June 12, 2026 - Oracle PeopleSoft Zero-Day Exploited, CISA Orders Emergency Ivanti Patching, Europol Dismantles Crypto-Laundering Network

A critical Oracle PeopleSoft zero-day (CVE-2026-35273) has been actively exploited by the ShinyHunters extortion group to breach universities and enterprise systems. Meanwhile, CISA has issued an emergency directive requiring federal agencies to patch an actively exploited Ivanti Sentry vulnerability within three days. In a significant law enforcement victory, Europol has dismantled the AudiA6 cryptocurrency laundering service, cutting off a major financial channel used by ransomware gangs and cybercriminals.

Read article
Security Briefing | June 11, 2026 - Langflow RCE Exploited, CISA Issues 3-Day Patch Directive, China Botnet Hits 1,500 Devices
SECURITY BRIEFING

JUNE 11, 2026

Security Briefing | June 11, 2026 - Langflow RCE Exploited, CISA Issues 3-Day Patch Directive, China Botnet Hits 1,500 Devices

Multiple critical vulnerabilities are under active exploitation, including an unpatched Langflow flaw (CVE-2026-5027) and a max-severity Ivanti Sentry bug. CISA has added three new flaws to its KEV catalog and issued a new directive requiring agencies to patch critical exploited vulnerabilities within three days. China-linked JDY botnet has expanded to over 1,500 devices targeting U.S. military networks, while OceanLotus continues espionage campaigns against Vietnamese entities.

Read article
Security Briefing | June 10, 2026 - Three Critical Threats Demand Immediate Action
SECURITY BRIEFING

JUNE 10, 2026

Security Briefing | June 10, 2026 - Three Critical Threats Demand Immediate Action

Microsoft's June 2026 Patch Tuesday addresses a record 206 vulnerabilities, including three zero-days exploited in the wild. A critical Veeam Backup & Replication RCE flaw (CVE-2026-44963) and a ServiceNow incident exposing customer data further underscore the urgency of patching. Meanwhile, a new Microsoft Defender zero-day exploit 'RoguePlanet' has been publicly released, granting SYSTEM privileges.

Read article
EACA Summit Partners with Addis Ababa Science and Technology University
PRESS RELEASE

JUNE 7, 2026

EACA Summit Partners with Addis Ababa Science and Technology University

The East Africa Cyber & AI Summit has signed a Memorandum of Understanding with Addis Ababa Science and Technology University (AASTU), establishing a key academic partnership centered on cybersecurity, responsible AI, and digital innovation across Africa.

Read article
2026 theme: Building Cyber Resilience for a Digitally Sovereign East Africa
ANNOUNCEMENT

MARCH 1, 2026

2026 theme: Building Cyber Resilience for a Digitally Sovereign East Africa

This year's program focuses on sovereign infrastructure, regional capacity, and practical defense against AI-accelerated threats.

Read article
Continued collaboration with the African Union Commission
PRESS RELEASE

FEBRUARY 23, 2026

Continued collaboration with the African Union Commission

Dedicated sessions on continental cyber frameworks and cross-border cooperation will anchor the policy track.

Read article
Speaker proposals now open
SPEAKERS

FEBRUARY 9, 2026

Speaker proposals now open

We are accepting sessions on threat intelligence, AI security, fraud prevention, and national cyber policy.

Read article
AI and quantum security track added
PROGRAM

DECEMBER 4, 2025

AI and quantum security track added

A dedicated track on AI governance, adversarial ML, and post-quantum readiness joins the main program.

Read article
Venue confirmed: Addis Ababa Science and Technology University
VENUE

NOVEMBER 19, 2025

Venue confirmed: Addis Ababa Science and Technology University

The summit returns to Addis Ababa with conference facilities, breakout rooms, and reliable connectivity for live demos.

Read article

Ready to join EACA Summit 2026?

Secure your pass and follow the program as new speakers and sessions are announced.

Register now