FlagThis

Abstract

In 2025 and 2026, two events settled questions that had until then been speculative. In the first, a large language model executed the great majority of a state-aligned cyber-espionage campaign autonomously, with human operators intervening only at a few strategic decision points; the model discovered vulnerabilities, exploited them, moved laterally, and exfiltrated data largely on its own. In the second, quieter event, the most capable cyber-relevant model was placed under a controlled-access program limited to a vetted set of United States technology firms, allied governments, and European standards bodies. That perimeter includes no African government, operator, or university. Read together, the two events establish the argument of this paper: frontier language models have become a decisive instrument of cyber operations, and that instrument is built, owned, and rationed within a small circle from which Africa is absent. The paper shows that Africa stands outside the perimeter on every count. It does not build frontier models; it cannot yet operate them; and it cannot, for now, obtain the most capable ones. The operational deficit is documented along three axes skilled people, compute and electrical power, and investment each set against current figures, including the latest national workforce counts, the continent's share of global data-center capacity, and quarterly AI-investment flows. The same instrument is already turning against the continent: AI-enabled fraud is mounting against African mobile-money systems, the part of the digital economy the continent leads, and imported defensive tools fit local conditions poorly. Two distinct constraints are then examined. The first is the gating of frontier models by their developers, a constraint no African decision can open. The second is the dependence of African networks on infrastructure vendors now caught in geopolitical restriction. African states chose this dependence deliberately, on rational terms at the time, and they can still revisit it. Because the developers themselves forecast that comparable but ungated models will proliferate within six to twelve months, far faster than any domestic capacity can be built, the paper argues that the only realistic response operates inside that short window: entering threat-intelligence sharing arrangements, adopting governance frameworks already authored elsewhere, and opening partnership negotiations with those who hold the instrument. The continent enters such collaboration as a contributor of data, conditions, and legitimacy, not as a petitioner. What it makes of the window will be decided by Africans.