Kenya: Cyber Threats in Kenya Rise 14.45pc to 2.6 Billion in Q3

What the report says

Kenya logged 2.6 billion cyber threat events in the three months to September 2026, according to the Communications Authority of Kenya, representing a 14.45% rise from the previous quarter. The report, carried by Capital FM and distributed by AllAfrica, says the increase reflects a mix of technical weaknesses and more advanced attack methods, including poor system patching, limited public awareness of phishing and similar scams, and criminals’ greater use of artificial intelligence.

The regulator said system attacks made up the biggest share of incidents, followed by malware, brute-force attempts, web attacks, mobile app attacks and distributed denial-of-service activity. It also noted a small number of other attack events. The figures indicate that Kenya’s digital infrastructure continued to face heavy pressure during the quarter, especially as more public services, businesses and consumers rely on connected systems.

In response, the National Kenya Computer Incident Response Team Coordination Centre issued 20.3 million cyber threat advisories between July and September, slightly fewer than in the prior quarter. The advisories were aimed at helping organisations, including those running critical information infrastructure, strengthen their defences.

The CA urged organisations to update systems and applications quickly, use multi-factor authentication, improve password practices and ensure firewalls and antivirus tools are properly configured. More broadly, the report highlights a continuing need for cyber hygiene and user awareness as threats become more sophisticated.