Kenya says cyber threats jumped sharply

Cybersecurity has quickly become one of the most pressing challenges facing East Africa's rapidly growing digital economy. As businesses and individuals rely more heavily on internet services, mobile banking, and online platforms, the volume and complexity of digital threats targeting the region continue to surge.

Recent cybersecurity data highlights the expanding scale of online risks targeting infrastructure, organizations, and everyday internet users. Understanding these numbers is essential for building stronger digital defenses across households and enterprise environments alike.

For ordinary users and businesses, recognizing common cyber threats is the first step toward effective prevention. Staying informed about how vulnerabilities are exploited allows individuals and companies to safeguard sensitive personal data and maintain operational stability.

What Are the Numbers Reported on Cyber Threats?

In its latest national cyber threat reporting covering the 2025/26 financial period, Kenya detected more than 11.12 billion cyber threat events through the National KE-CIRT/CC. The vast majority of these detections—over 10.6 billion events—were attributed to automated scans targeting system vulnerabilities.

The data also recorded tens of millions of malware attempts and web application attacks targeting public and enterprise infrastructure. While the overall volume of detected events showed periodic fluctuations across quarters, the figures demonstrate an escalating cyber threat landscape across Kenya and the wider region.

Who Released the Cyber Threat Statistics?

The official statistics were released by the Communications Authority of Kenya (CA) through the National Kenya Computer Incident Response Team Coordination Centre (National KE-CIRT/CC). The agency monitors the national cyber threat landscape, manages incidents, and publishes regular advisories for public and private organizations.

Industry leaders, including Safaricom, have also highlighted these official figures during cybersecurity summits to emphasize the urgency of strengthening defense systems across government bodies and commercial enterprises.

What Ordinary Users and Firms Should Learn From the Findings

The high volume of automated threat events offers critical takeaways for both individual internet users and business entities:

• Keep Software and Devices Updated: Most automated attacks exploit known system vulnerabilities in unpatched software. Installing regular security updates on phones, laptops, and router firmware closes these entry points.
• Recognize Simple Online Risks: Everyday users must remain vigilant against common risks like phishing emails, fake M-Pesa or banking SMS alerts, cloned executive voices/deepfakes, and weak or reused passwords.
• Implement Multi-Factor Authentication (MFA): Organizations and individuals should enforce MFA across all email accounts, business portals, and financial apps to prevent unauthorized access even if credentials are compromised.
• Prioritize Cyber Awareness: Cybersecurity is a shared responsibility. Businesses must regularly train staff to identify suspicious links, while individuals should avoid downloading unverified apps or connecting to unsecured public Wi-Fi networks.