The kingdom has been listed among African countries with the lowest recorded cyber vulnerabilities after accounting for just 0.2% of detected vulnerabilities across the continent last year, according to the INTERPOL African Cyberthreat Assessment Report 2026.
The report places Eswatini alongside Namibia, which also recorded 0.2%, while South Africa accounted for the largest share of detected vulnerabilities at 43.6%. Kenya followed with 11.9% and Nigeria with 9.1%. Other countries such as Ethiopia, Angola and Senegal recorded higher levels than Eswatini.
The findings are based on data from the Shadowserver Foundation, which identified more than 6 000 exploitable cyber vulnerabilities across Africa last year.
These vulnerabilities mainly involved outdated computer systems, unpatched software, vulnerable virtual private networks (VPNs) and poorly configured online platforms that could be exploited by cybercriminals.
Senior Assistant Commissioner of Police and Director of the Fraud and Commercial Crimes Unit Nicholas Jele said although Eswatini recorded just 0.2% of Africa’s detected cyber vulnerabilities in the INTERPOL African Cyberthreat Assessment Report 2026, the figure should not be regarded as low.
He explained that, given the country’s relatively small population compared to countries such as South Africa and Nigeria, the percentage remained a concern.
It should be mentioned that one of the most common cybercrimes in the country is online financial fraud, where unsuspecting members of the public are targeted by scammers commonly known as ‘facata’.
Although Eswatini’s recorded vulnerability level is among the lowest on the continent, the report cautions that every country remains at risk as cybercrime continues to grow across Africa.
INTERPOL states that cybercriminals are increasingly using stolen data, artificial intelligence and automated tools to identify weaknesses in computer systems. Once they gain access, the information can be used to carry out identity theft, financial fraud, ransomware attacks and other online crimes.
The report notes that many of the weaknesses identified across Africa were not caused by highly advanced attacks, but by systems that had not been updated or secured properly.
“Many organisations continue to use outdated software or fail to install security updates, making them easy targets for criminals,” reads the report.
According to the report, countries with larger numbers of internet users naturally recorded higher levels of vulnerabilities because they have more online systems, digital services and internet-connected devices.
However, INTERPOL says no country should consider itself safe simply because it recorded fewer detected vulnerabilities.
The assessment explains that cybercriminals often begin by searching for weak computer systems connected to the internet. They then use those weaknesses to gain access before stealing information, locking files for ransom or carrying out financial fraud.
The report further states that data breaches have become the starting point for many forms of cybercrime. Once personal or business information is stolen, it can be sold on illegal online markets or used in identity theft, business email compromise, mobile money fraud and other criminal activities.
INTERPOL highlighted several cyber incidents reported elsewhere in Africa during the assessment period. These included a data breach at a telecommunications company in Namibia that exposed about 500 000 customer records, attacks on government-linked social media accounts in Tanzania and a breach involving Somalia’s electronic visa platform.
The report says these cases demonstrate how weaknesses in digital systems can affect government services, businesses and members of the public.
