Kenya cyber event ends with AI security warning at CyberWeek Africa 2026

The main warning from Nairobi

CyberWeek Africa 2026 ended Friday at Kenyatta International Convention Centre (KICC) with one clear message: AI is now both shield and spear.

Kenya told more than 1,200 delegates from 20 countries that criminals are using AI to make scams that look and sound real — fake voices cloning your boss, deepfake videos, perfect phishing emails that copy your bank tone, and targeted attacks on mobile money.

Closing speaker Jacob Narengo, Principal Administrative Secretary for Internal Security, who closed on behalf of PS Internal Security, summed it up: _“AI is a force multiplier — both shield and spear. Threat intelligence is how defenders stay ahead, knowing about the attack before it strikes, so AI can help defenders detect threats in seconds or it can help attackers fake voices, craft convincing scams and target mobile money users.”_

The 5th edition, held 27-30 October 2026 under theme “Cyber Threat Intelligence in the Age of AI”, was led by Ministry of Information, Communications and Digital Economy, Kenya School of Government, Ministry of Interior, National Cybersecurity Agency, University of Nairobi and CyberPro Global. Sponsors included Huawei Kenya, Cisco, Safaricom, Absa, Fortinet. It also had a hackathon with Expertise France and EU, plus awareness sessions in 21 higher institutions.

National Cybersecurity Agency Chairman Dr Martin Koyabe urged trust and information sharing between government, banks, telcos and regulators — not working in silos.

How AI can help and hurt — everyday examples

How AI helps you:

Think of AI like a security guard who never sleeps. Old antivirus waited for you to click bad link. New AI threat intelligence watches patterns — like M-Pesa normally you send KSh 2k to mama on Sunday, but suddenly at 2am someone tries to send KSh 50k to new number from your account on strange device in different country. AI flags that in seconds and blocks.

Huawei experts at event — Country Privacy Officer Kaine Zhang and Regional Expert Lu Hao — spoke about next-gen autonomous security operations systems that link all systems to see full picture and respond fast.

How AI hurts you:

Same tech lets scammers work faster.

• Voice cloning: 30 seconds of your voice from TikTok is enough for AI to call your mother as “you” asking for emergency M-Pesa.
• Perfect phishing: No more bad English. AI writes email exactly like Equity or KCB, with your name, saying “Your account locked, click here.”
• Fake M-Pesa messages: AI crafts SMS that looks identical to real Safaricom code, even uses correct balance.

Communications Authority reported 3.36 billion cyber threat events detected Jan-March 2026 and 4.5 billion Oct-Dec 2025 — mostly system vulnerabilities.

Why ordinary users should care

This is not just for banks and government.

If you use M-Pesa, WhatsApp, online banking, HELB portal, eCitizen, you are target. Kenya’s digital economy is expanding — Digital Superhighway, DPI, digital IDs, online public services — so risk grows with it.

Cabinet Secretary William Kabogo warned at Safaricom Cyber Security Summit Oct 14: AI-powered fraud, identity impersonation, manipulated content now top threats. Child online safety also flagged — AI-generated harmful content, cyberbullying.

What to do now: Enable 2FA, don’t share OTP, check sender number, call back if someone claims emergency, keep phone OS updated. For small business, train staff — event awarded 21 government ICT officers after Huawei network training, but need more skilled defenders.

Event closed with declaration to improve threat-info sharing across Africa.