Kenya’s KE CIRT reports 842 million cyber threats
Kenya’s cybersecurity response team recorded more than 842 million threat events between July and September, representing an 81 percent decline from the prior quarter despite persistent attacks targeting government infrastructure and critical systems. Web application vulnerabilities drew over 10 million exploitation attempts focused on credential theft and database compromise, while malware incidents exceeded 31 million cases exploiting unpatched systems and social engineering tactics.
Government networks, internet service providers, cloud platforms, and educational institutions faced the highest attack concentrations, with advanced persistent threats maintaining long-term infiltration operations through spear-phishing campaigns and supply chain compromises. The National KE-CIRT/CC distributed nearly 20 million security advisories during the reporting period, recommending multi-factor authentication implementation, regular patching protocols, network segmentation strategies, and behavioral monitoring systems to counter evolving ransomware operations and artificial intelligence-enhanced phishing schemes.

