MIL Africa Engine

Source: The Conversation – Africa – By Chidi Anselm Odinkalu, Professor of Practice, International Human Rights Law, Tufts University

Member states of the African Union (AU) will hold their most consequential election of the year in February 2026, to fill ten vacancies in continental human rights institutions.

They will elect three experts to the African Commission on Human and Peoples’ Rights and seven to the African Committee of Experts on the Rights and Welfare of the Child.

These individuals will serve on the committee for five years and on the commission for six, alongside 23 peers with unexpired terms.

The elections are important because these institutions exist primarily to ensure that the continent’s governments take African lives seriously. They are entrusted with ensuring that Africans live in dignity and equality. This is a difficult task in a continent where human rights often sound hollow or precarious.

As a scholar who studies Africa’s regional institutions, I find that they are deeply underestimated. Yet, these institutions have considerable powers to undertake investigations and issue decisions against African governments. Their decisions can attract serious sanctions if disregarded.

Recent events show why these institutions continue to matter. Several AU treaties, particularly the African Charter on Human and Peoples’ Rights and the African Charter on Democracy, Elections and Governance, protect the right to vote and mandate independent and impartial courts as arbiters of election disputes.

However, most of Africa’s elections are now more poorly managed than ever before. In 2025 alone – in Cameroon, Côte d‘Ivoire and Tanzania, among others – thousands of Africans were killed in state-sponsored election violence.

In many African countries, the judiciary and other independent institutions face attacks or are captured by politicians, depriving people of legal recourse.

This has contributed to deepening civic apathy, a creeping return of military and authoritarian rule, and further erosion of democratic governance.

Of course, treaty institutions do not organise or supervise national elections. But they can counter authoritarianism by mobilising responses to the underlying causes of rigged elections.

This is why Africans everywhere should show an interest in the process and outcome of the African Union’s February 2026 elections for continental human rights institutions. They protect the continent’s citizens and communities.

Good intentions, poor outcomes

When the Organisation of African Unity (OAU) elected the pioneer experts to the African Commission in 1987, most were senior ministers from dictatorships.

Today, the AU no longer elects obvious politicians to these bodies. Still, the candidates are mostly aligned with ruling African governments.

This was not the intention. The continental institutions were created to respond when, for instance, governments attacked protesters, shut down the internet, displaced communities without compensation, or hijacked elections.

The institutions are Africa’s official human rights enforcers. They should ensure that governments uphold the principles and values they have undertaken under continental treaties. Those include “respect for democratic principles, human rights, the rule of law and good governance” and “respect for the sanctity of human life”.

For this reason, the treaties only allow to be elected to these roles “African personalities of the highest reputation, known for their high morality, integrity, impartiality, and competence in matters of human and peoples’ rights.” Such individuals work in their personal capacities and not as stooges of any government.

In practice, these criteria are not always met.

Regrettably, most Africans are unaware that these mechanisms exist. That affects the credibility of the selection process.

The AU doesn’t give the selection much publicity. Although it nominally encourages member states to adopt transparent nomination processes, most states prefer to keep their nominations ad hoc and opaque.

A 2020 report by Amnesty International described the selection as characterised by “secrecy and largely merit-less national nomination processes”. Three years earlier, the Open Society Justice Initiative and the International Commission of Jurists similarly criticised it as “largely unknown and shrouded in secrecy”.

In 2023, African citizens and civil society instituted the Arusha Initiative to improve citizen awareness, the quality of nominations and the outcomes.

What should happen

These institutions, especially the African Commission and the African Court on Human and Peoples’ Rights, exist to foster shared values. They are committed to the rule of law and due process. And they are supposed to create an enabling environment for entrepreneurs and investors, who in turn can help develop the continent.

By protecting labour and land rights, these mechanisms guide states in implementing socio-economic rights in Africa and support innovation. By addressing all forms of discrimination, including xenophobia, they can also encourage mobility across the continent.

By advancing jurisprudence on free movement as a human right and promoting associated treaties that complement regional integration, these mechanisms could help achieve free movement across Africa.

The institutions could also address environmental degradation, livelihoods and forced displacement. In doing so they would centre the interests of Africa’s indigenous peoples.

Africa’s citizens and communities fund these institutions through their taxes. That alone is reason enough to care about them.

Human rights bodies should not be disembodied entities ministering from distant lands to unrepresented people. Instead, citizens should choose capable, independent experts to protect their livelihoods and futures.

Ikechukwu Uzoma, human rights lawyer and researcher at the Robert & Ethel Kennedy Human Rights Center in the US, is co-author of this article.

– Africa’s human rights institutions are electing leaders. Why this matters
– https://theconversation.com/africas-human-rights-institutions-are-electing-leaders-why-this-matters-273495

Source: The Conversation – Africa – By Thembekile Olivia Mayayise, Senior Lecturer, University of the Witwatersrand

Ransomware is a type of malicious software that makes a victim’s data, system or device inaccessible. It locks the target or encrypts it (converting text into an unreadable form) until the victim pays a ransom to the attacker.

It’s one of the most widespread and damaging forms of cyberattacks affecting organisations around the world. An Interpol report identified ransomware as one of the most widespread cyber threats across Africa in 2024. South Africa reported 12,281 detections and Egypt reported 17,849.

Despite global efforts to curb it, ransomware continues to thrive, driven by cybercriminals seeking quick financial gain. In its first-quarter 2025 report, global cybersecurity company Sophos revealed that 71% of the South African organisations hit by ransomware paid the ransom and recovered their data. But the full cost of a ransomware attack is difficult to quantify. It extends beyond the ransom payment to include revenue losses during the system downtime and potential reputational damage.

Cybercriminals often select organisations where service disruption can cause significant public or operational effects, increasing the pressure to pay the ransom. Power grids, healthcare systems, transport networks and financial systems are examples. When victims refuse to pay the ransom, attackers frequently threaten to leak sensitive or confidential information.

One reason ransomware has become so pervasive in Africa is the continent’s cybersecurity gap. Many organisations lack dedicated cybersecurity resources, along with the skills, awareness, tools and infrastructure to defend against cyberattacks.

In this environment, hackers can operate with relative ease. Every business leader, particularly those overseeing information and communication technology (ICT) or managing sensitive data, should be asking a critical question. Can our organisation survive a ransomware attack?

This is not just a technical issue; it is also a governance matter. Board members and executive teams are increasingly accountable for risk management and cyber resilience.

As a researcher and expert in the governance of information technology and cybersecurity, I see the African region emerging as a hotspot for cyberattacks. Organisations must be aware of the risks and take steps to mitigate them.

Ransomware attacks can be extremely costly, and an organisation may struggle or fail to recover after an incident.

Weaknesses that increase ransomware risk

Telecommunication company Verizon’s data breach report for 2025 revealed that the number of organisations hit by ransomware attacks had increased by 37% from the previous year. This exposes how unprepared many organisations are to prevent an attack.

A business continuity plan details how a business would continue its operations in the event of a business disruption. An ICT disaster recovery plan is part of the continuity plan. These plans are critical in ensuring continuity of operations after the attack, as affected businesses often experience prolonged downtime, loss of access to systems and data, and severe operational disruptions.

Professional hackers actually sell ransomware tools, making it easier and more profitable for cybercriminals to launch attacks without regard for their consequences.

Hackers can infiltrate systems in various ways:

• weak security controls such as weak passwords or authentication mechanisms

• unmonitored networks, where there is a lack of intrusion detection systems that can report any suspicious network activity

• human error, where employees can mistakenly click on e-mail links which contain ransomware.

Poor network monitoring can allow hackers to remain undetected long enough to collect data on vulnerabilities and identify key systems to target. In many cases, employees unknowingly introduce malicious software, links or downloading attachments from phishing emails. Phishing is a social engineering attack that uses various manipulation techniques to deceive a user into disclosing sensitive details, such as payment or login details, or to trick them into clicking on malicious links.

Paying up

Attackers commonly demand payment in Bitcoin or other cryptocurrencies because the payments will be quite difficult to trace. Paying the ransom offers no guarantee of full data recovery or protection against future attacks. According to global cybersecurity company Check Point, notorious ransomware groups like Medusa have popularised double extortion tactics.

These groups demand payment and threaten to publish stolen data online. They often use social media platforms and the dark web – part of the internet which is only accessible by means of special software – allowing them to remain anonymous or untraceable. Their goal is to publicly shame victims or leak sensitive information, pressuring organisations to comply.

These breaches also contribute to phishing scams, as exposed email addresses and credentials circulate across the internet, which leads to more data breaches. Websites such as Have I Been Pwned can assist in checking whether your email has been compromised in any previous data breach.

Organisational resilience against ransomware

Organisations should strengthen their cybersecurity in several ways.

• Put strong technical and administrative measures in place to keep data safe. They include effective access controls, network monitoring tools and regular system and data backups.

• Use tools that block malware attacks early and provide alerts when suspicious activities occur. This includes using strong endpoint protection ensuring that any device which connects to the network has intrusion detection systems that help spot unusual network activity.

• Equip staff with the knowledge and vigilance to detect and prevent potential threats.

• Develop, document and communicate a clear incident response plan.

• Bring in external cybersecurity experts or managed security services when the organisation does not have skills or capacity to handle security on its own.

• Develop, maintain and regularly test business continuity and ICT disaster recovery plans.

• Obtain cyber-insurance to cover the risks that can’t be completely prevented.

Ransomware attacks are a serious and growing threat to individuals and organisations. They can cause data loss, financial losses, operational disruptions and reputational damage. There are no security measures that can fully guarantee complete protection from such attacks. But the steps outlined here might help.

– Ransomware: what it is and why it’s your problem
– https://theconversation.com/ransomware-what-it-is-and-why-its-your-problem-269430