NAIROBI, Kenya, Sept 18 – Kenya recorded 11.1 billion cyber threats in the 2025/26 financial year, a 29 percent increase from 8.6 billion threats reported in 2024/25, according to the Communications Authority of Kenya (CA).
The CA’s fourth-quarter Sector Statistics Report shows that distributed denial-of-service (DDoS) attacks recorded the biggest increase, rising 114.3 percent to 72.1 million from 33.7 million.
Web application attacks increased by 99 percent to 51.5 million, while malware attacks rose 64.8 percent to 230.3 million. Mobile application attacks increased by 54 percent to 789,826.
The increase in cyber threats was accompanied by a 60.8 percent rise in cyber advisories issued to affected ICT users, which increased to 83.1 million from 51.7 million.
Advisories on brute-force attacks recorded the highest increase, rising 365.5 percent to 25.5 million, while web application attack advisories increased 110.5 percent to 40.5 million.
The CA has previously attributed the persistent cyber threat landscape to inadequate system patching, low cybersecurity awareness, phishing and social engineering attacks, as well as the growing use of artificial intelligence and machine-learning tools by cybercriminals.
The regulator said cybercriminals continue to target sectors handling large volumes of sensitive data, including government agencies, educational institutions, financial institutions and telecommunications companies.
Cryptocurrency exchanges, foreign exchange trading platforms and online gambling websites have also emerged as increasingly attractive targets as digital services expand.
