Last updated
Presidency of South Africa: Cybersecurity Incident
The South African presidency pulled its website offline two days after the PHP project released fixes for critical flaws, pointing to a security exposure tied to the global PHP vulnerability scramble.
Source: Daily Maverick
- What happened
- The South African presidency pulled its website offline two days after the PHP project released fixes for critical flaws, pointing to a security exposure tied to the global PHP vulnerability scramble.
- Who
- Presidency of South Africa · South Africa
- When
- 2026-10-23
- Source
- Daily Maverick
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Presidency of South Africa in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: MitchelLake's Talent Market Index sits at 122.7 (Hot), up 17.8 on the prior month; EMEA hiring signal is running easing (-17.7pts).
Presidency of South Africa: 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across EMEA
Cybersecurity Incident · EMEA
Rand Mutual Assurance →Rand Mutual Assurance (RMA), the insurer handling injury claims for mineworkers and metalworkers, is investigating an alleged theft of 1.68 million claim records. A hacker claims to hold 366GB of its data.
Cybersecurity Incident · EMEA
Discover-Tech →Israeli ad company Discover-Tech's advertising platform was reportedly used as a zero-click spyware delivery channel by the Candiru threat actor, enabling device fingerprinting, tracking and targeted infection.
Cybersecurity Incident · EMEA
Les Mousquetaires →Attackers remotely took control of refrigeration controllers at hundreds of French supermarkets on the night of October 11, warming fridges and freezers up to 50°C and forcing stores to discard food. The entry point was a Danfoss store-controller that maintenance firms manage remotely.
Cybersecurity Incident · EMEA
The Foschini Group (TFG London) →TFG London, owner of Hobbs, Phase Eight and Whistles, discovered a cybersecurity incident on October 11 that took several IT systems offline and delayed customer orders. Incident response and business continuity plans were activated and external cybersecurity specialists brought in. Scope of any customer data compromise is still unknown.
Cybersecurity Incident · EMEA
TFG London →TFG London, owner of Hobbs, Phase Eight and Whistles, disclosed a cyber-attack on its websites and IT systems across three UK retail chains that may have compromised customer personal data. It follows a recent attack on Asos.
Cybersecurity Incident · EMEA
Pays ApS →Funen-based IT services firm Pays ApS had its authorised access to Denmark's Central Register of Persons (CPR) abused via an account protected by the password '123456'. The intrusion affected data on 8.8 million people; the attacker ran about 14 million automated searches between Sept 10 and Sept 20, and was detected Oct 2. Pays' website is offline and its managing director confirmed the access was exploited.
Where this lands in our work
- Executive Search: EMEA →
Our EMEA practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗