While AI transforms both attacks and defences worldwide, African companies are particularly exposed to AI-powered cybercrime, according to a new report by Boston Consulting Group (BCG). The study, “AI Is Raising the Stakes in Cybersecurity”, reveals that many businesses are struggling to keep pace with increasingly sophisticated AI-driven threats.
Based on a global survey of 500 senior leaders, including 50 from Africa, the report found that nearly 60 percent of African firms experienced an AI-enabled cyberattack in the past year, yet only half are prioritizing AI to strengthen defences. Globally, just 7 percent of organisations have deployed AI-enabled tools, though 88 percent plan to do so.
Managing Director and Senior Partner at BCG Casablanca, Hamid Maher, said, “AI is enabling faster, more deceptive, and scalable cyber threats. African businesses are already feeling the impact, yet only 29 percent have advanced AI cyber defence capabilities. This gap is creating exposures the continent can no longer afford.”
The report cites real-world incidents, including a $25 million fraud via a deepfake video call, an AI-generated robocall campaign leading to a $1 million fine, and ransomware attacks that disrupted hospital systems.
Despite rising threats, corporate response remains slow. Only 5 percent of global and 3 percent of African companies have boosted cybersecurity budgets due to AI, and 82 percent of African firms struggle to hire AI security talent. Less than 30 percent of AI-enabled defence tools are considered advanced.
BCG recommends a dual leadership model, with CEOs prioritizing AI and cybersecurity at the board level and CISOs deploying high-impact AI-enabled defences.
Global Director of BCG’s Centre for Leadership in Cyber Strategy, Vanessa Lyon, added, “Attackers are moving at machine speed. Organisations must act with intelligence and leadership to shape the AI-cyber landscape rather than be shaped by it”.
