The Namibia Cyber Security Incident Response Team (NAM-CSIRT) says it detected 559,125 cyber vulnerabilities between July and September 2025, reflecting a 1.74% increase from the previous quarter and highlighting rising cyber risks across Namibia.
NAM-CSIRT says that despite the increase in vulnerabilities, cyber events dropped sharply by 52.74% to 398,800, which the organisation attributes to stronger security measures and increased awareness within institutions.
According to NAM-CSIRT, most weaknesses were linked to misconfigured or outdated systems, including open CWMP, Telnet, DNS and FTP services.
“Safeguarding our digital environment requires vigilance, collaboration and proactive defence strategies across all sectors,” CRAN CEO Emilia Nghikembua said.
NAM-CSIRT reports that the Otjiwarongo Municipality was hit by a ransomware attack by the INC Ransom group, while citizens were targeted through smishing attempts and deepfake videos impersonating senior government officials.
The organisation also says Namibia was among the countries affected by ransomware groups RADAR and Warlock, who exploited a critical Microsoft SharePoint vulnerability (CVE-2025-53770). NAM-CSIRT is urging organisations to prioritise system patching and proper maintenance.
As part of its capacity-building efforts, NAM-CSIRT held a Constituents Engagement event in Windhoek on 30 September 2025 to strengthen stakeholder cooperation and encourage the formation of sectoral Computer Incident Response Teams (CIRTs). The team also awarded cybersecurity bursaries to support the development of future professionals.
“Collaboration is not optional; it is a strategic necessity. Through shared intelligence and collective action, Namibia can build a trusted and resilient cyberspace that supports our national development goals,” Nghikembua said.
NAM-CSIRT also warns of rising threats, noting increased dark web activity and a 6,000% surge in infostealer infections since 2018.
The organisation further cautions users that security support for Windows 10 ends on 14 October 2025, urging upgrades to Windows 11 or enrolment in Microsoft’s Extended Security Updates programme.
