AI news for South Africa, 16 October 2026
Today's brief is dominated by South African security and skills data: 63% of local cyber security posts sit unfilled, AI was linked to more than half of Africa's recorded cyber crime in 2025, and Southern Africa took 92% of the continent's ransomware detections. For an SA operator the practical takeaway is that AI-enabled phishing now targets finance, HR and call centre staff, not just IT, and that ChatGPT's Chrome extension now reads your open tabs, which is a POPIA question the moment those tabs hold customer data.
-
63% of SA cyber security posts are unfilled as AI attacks scale
A 2024 CSIR survey found 63% of cyber security positions in South African organisations were partially or fully unfilled, with more than a third of applicants holding less than 25% of the required qualifications. ISACA's 2025 report found 65% of organisations had unfilled cyber security roles. INTERPOL's African Cyberthreat Assessment Report 2026 links AI to more than half of cyber crime cases recorded in Africa in 2025, with Southern Africa taking 92% of the continent's ransomware detections and 70% of business email compromise detections.
For a South African business: You cannot hire your way out of this in South Africa right now, so the practical move is training the staff you already have. A small law firm, accountant or Takealot seller should treat finance, HR and customer service as the attack surface, because AI-written phishing now names your manager and the invoice you are expecting.
-
Agentic AI in security operations: faster response, but who carries the blame
ITWeb reports that agentic AI systems in managed detection and response can pursue defined goals, investigate alerts, correlate data across security platforms and recommend or initiate a response within set boundaries. The article notes a conventional security operation can generate thousands of alerts a day, many false positives, and asks what happens when an automated response wrongly isolates a critical system or blocks legitimate business activity.
For a South African business: If you run an MDR provider or an internal SOC in South Africa, the decision to let an agent act rather than just recommend is a business continuity decision, not a tooling one. Set escalation paths and thresholds in writing before you switch it on, because an agent that isolates the wrong machine during load-shedding hours costs you trading time you cannot recover.
-
ChatGPT's Chrome extension can now read your open tabs
OpenAI has upgraded ChatGPT's Google Chrome extension so it can view your open browser tabs when you tag Chrome in the ChatGPT web or desktop app, and ChatGPT in the sidebar now carries full conversation history without leaving the page. ChatGPT Work can also control Chrome tabs for tasks like sending messages, filling out forms or downloading files, and organise open tabs.
For a South African business: This is a POPIA problem waiting to happen in an SA office. If your staff keep client records, SARS correspondence or customer lists open in Chrome tabs, tagging ChatGPT hands that content to a US-based service, so put a written rule in place about which tabs are off limits before the extension spreads through the team.
-
Meta ships an open-weight model built to run on a Mac, but it needs 1TB of RAM
Meta launched Muse Spark Open, an open-weight model with 816 billion parameters and a 1 million token context window, which it says is natively multimodal and built for complex coding and agentic tasks. It is designed to run locally on Apple computers but requires at least 1 terabyte of RAM, per Engadget, and runs best on a Mac Studio with the M5 Ultra chip. Meta is making it available through several API platforms.
For a South African business: Local running is the privacy answer for SA firms that cannot send client data offshore, but a 1TB RAM Mac Studio is well beyond a small Johannesburg or Cape Town practice's budget. For most SA businesses the realistic route is the API, which puts you back in the data residency question rather than out of it.
-
Sirona Medical names South Africa in its international expansion plan
Sirona Medical raised $40 million in Series D funding led by Avidity Partners to scale its cloud-native radiology platform RadOS and commercialise Sirona Cortex, its agentic AI orchestration layer. The company says it plans to launch Sirona Global before the end of 2026, targeting the United Kingdom, European Union, South Africa, New Zealand and Australia.
For a South African business: This is a stated intention, not an available product, so nothing changes for an SA radiology practice today. It is worth watching because private imaging groups in South Africa face the same radiologist shortage and rising scan volumes that Sirona is selling against, and a local rollout would raise patient data residency questions under POPIA.
-
UJ students build AI tools with USSD fallback for farmers without internet
More than 150 University of Johannesburg students took part in the AI for Africa Hackathon Challenge at Vodacom World, run through a partnership between Vodacom, UJ and Amazon Web Services. The winning project, Mzansi Farmer AI, combines climate and market information in a dashboard with AI recommendations, and includes USSD access for farmers without internet connectivity. Other prototypes covered maternal health, gender-based violence panic buttons and youth employment.
For a South African business: The USSD fallback is the detail that matters here. It is a working reminder that any AI product aimed at South African users outside the metros has to function without data, and that is a design constraint most imported AI tools simply do not meet.
-
Anthropic gives METR researchers employee-level access and gives up veto on publication
Anthropic is giving six METR researchers employee-level access, including company laptops, office space and internal tools comparable to its own risk assessment teams, to independently assess its models and safety practices. METR can publish its assessments and Anthropic cannot block publication, though it can require redaction in narrow pre-defined categories such as customer data and model architecture. The move follows a September essay by CEO Dario Amodei proposing embedded outside evaluators.
For a South African business: This is a governance signal rather than a tool you can buy. For an SA business weighing which AI vendor to build on, it is one more data point that Anthropic is accepting outside scrutiny, which matters if your POPIA compliance file has to name the model provider you rely on.
-
Sega pulls a remaster after users spot what looks like AI upscaling
Sega is removing Total War: Shogun 2 Complete Edition from storefronts after a launch where users complained about bugs and upscaling that appears to have been done by AI. The game has an Overwhelmingly Negative rating on Steam and has already been pulled there. Sega and Creative Assembly said the release fell short of their own standards and that they will reinstate the original game.
For a South African business: The lesson travels to any SA business shipping AI-assisted work to customers. If the output is visibly worse than what you sold before, the refunds and the reputational damage land on you, not on the tool, and a Takealot or Shopify seller has no studio PR team to absorb that.