The University of the Witwatersrand (Wits) suffered a zero-day cyber attack targeting its Oracle E-Business system, compromising operations across multiple countries. The attack exploited an unknown software vulnerability with no prior patch, forcing Oracle to respond under immediate pressure. While the university claims operations continue 'as normal,' the extent of data compromise remains under investigation, involving collaboration with ICT, Oracle, and cybersecurity experts. Critical Oracle patches were applied post-incident, but the potential risk to students, faculty, and administrative data is still being assessed. The Information Regulator was notified, highlighting compliance concerns. This attack aligns with a broader surge in cybercrime targeting South African institutions, including Netstar, Cell C, MTN, and SAA, with the country being a prime target for infostealer and ransomware attacks per ESET’s Threat Report. The incident underscores vulnerabilities in enterprise systems and the escalating threat landscape in Africa’s most targeted cyber region.