Kenya Cyber Threats Rise as Web Attacks Put Businesses on Alert

Kenya Records Billions of Cyber-Threat Events

Kenya is facing growing cybersecurity concerns after new figures from the Communications Authority of Kenya revealed a sharp increase in detected cyber threats, raising questions about the safety of businesses, government services and everyday internet users.

A report published by The Star Kenya on October 26, 2026, stated that approximately 2.7 billion cyber-threat events were detected between July and September. This represented a 14.45 per cent increase compared with the April-to-June quarter.

One of the most significant findings was the rise in attacks targeting web applications. These increased by 57.62 per cent to approximately 27.4 million during the three-month period. Malware threats also rose by 20.01 per cent to 70.8 million, while brute-force attacks, which involve repeatedly trying passwords to gain access to accounts, increased by 85.41 per cent.

These figures do not mean that billions of individual users were hacked. They represent detected threat events and attack attempts, some of which security systems may successfully block. However, the numbers show the scale of activity that organisations must monitor and defend against.

Why Businesses Should Be Concerned

As more companies move their operations online, cybersecurity has become an essential part of running a business. Banks, online shops, schools, telecommunications providers and government agencies depend on websites, databases and digital platforms to serve customers.

A successful cyber attack can interrupt these services, expose confidential customer information, cause financial losses and damage a company's reputation. For an online shop, for example, a website attack could prevent customers from placing orders or making payments. For a school, a security breach could expose student records.

Web application attacks often exploit weaknesses in website software, insecure configurations, outdated components or poorly protected connections between systems. Criminals may also use stolen passwords, malicious software and fraudulent messages to gain access.

The Communications Authority has highlighted the importance of updating software, strengthening authentication and improving cybersecurity awareness. Businesses that ignore these basic protections may leave avoidable weaknesses for attackers to exploit.

What Ordinary Internet Users Can Learn

Cybersecurity is not only a responsibility for large companies. Ordinary users can also take practical steps to protect their accounts, devices and money.

First, use strong, unique passwords for important accounts. Reusing one password across email, banking and social media means that one compromised account could put others at risk. A password manager can help users keep track of different passwords.

Second, enable two-factor authentication or multi-factor authentication wherever available. This adds another layer of protection if a password is stolen.

Third, be careful with unexpected messages, suspicious links and QR codes. A message that appears to come from a bank, delivery company or friend may be designed to steal login details or trick the recipient into sending money. Always verify unusual requests through an independent, trusted channel.

Users should also install software and security updates promptly, download applications from trusted sources and avoid sharing one-time passwords, PINs or banking credentials with anyone.

Building Safer Digital Businesses

Kenya's growing digital economy creates opportunities for businesses and consumers, but it also increases the importance of protecting online services. The latest figures underline why cybersecurity cannot be treated as an occasional technical task.

Companies need regular security checks, reliable backups, staff training and a clear plan for responding to incidents. Individuals, meanwhile, should make safer online habits part of their daily routine.

The message is straightforward: not every detected threat becomes a successful attack, but prevention is better than dealing with the financial and personal consequences of a breach. As digital services continue to expand, stronger security practices will be vital to maintaining public trust in the online world.