Cybersecurity in Benin: over 800 critical vulnerabilities detected between 2021 and 2024
In a report covering the period 2021-2024, the Agency for Information Systems and Digital Technology (ASIN) paints a troubling picture of the security of information systems of state institutions and infrastructure operators.
SUMMARY
Prepared by the Beninese Computer Security Incident Response Team (bjCSIRT), this document records 878 computer vulnerabilities detected over the last three years. A figure revealing the scale of the threats faced by the country’s digital systems.
Of these vulnerabilities, 207 are classified as critical, representing 24% of the total. These vulnerabilities are likely to have a high impact on the confidentiality, integrity or availability of data.
Critical Vulnerabilities and Exposed Sectors
The report details the main critical vulnerabilities identified. At the top of the list are: poor access management (41 cases), disclosure of sensitive information (26), authentication vulnerabilities (24), remote code execution (23), and SQL injection attacks (18).
These vulnerabilities are mainly concentrated in strategic sectors such as finance, public administration, and digital service providers.
Among the most alarming incidents, password leaks hold a key position. The report counts 832 cases of this kind, including 406 in the financial sector and 226 in public services.
These leaks, often due to inappropriate practices (unsecured storage, uncontrolled sharing, password reuse) or phishing attacks, have led to the takeover of sensitive accounts, including administrative accounts.
ASIN also reports major incidents such as: 23 malware infections, 12 cases of website hacking, 7 botnet network activations.
These elements testify to an increasing cyber threat to the national critical infrastructures.
Urgent Measures Recommended
In response to these systemic vulnerabilities, ASIN recommends an urgent and coordinated reaction. Among the proposed solutions: conducting regular security audits, continuous training of public servants, adopting robust solutions for identity and access management, and systematic updating of information systems.
The agency also calls for increased awareness in all state services and the institutionalization of a cybersecurity culture, indispensable to sustainably support Benin’s digital ambition.
Comments