Kenya Cybersecurity Weaknesses as IoT Devices Exploited

Kenya is facing a mounting cyber crisis, with recent reports showing that its rapid adoption of Internet of Things (IoT) devices has become a weak link in the nation’s cybersecurity defence. Over the first quarter of 2025, the National Kenya Computer Incident Response Team (KE‑CIRT/CC), under the Communications Authority, recorded a staggering 2.5 billion cyber threat events — a more than 200 percent jump from the previous quarter. Business Daily+2Majira+2 The bulk of these attacks targeted system vulnerabilities, including connected IoT devices, misconfigured software, and outdated operating systems. Technext+1
This surge of cyber threats comes as Kenya’s digital transformation accelerates, with more households and businesses embracing smart meters, wearable tech, and other connected gadgets. But security experts warn many of these devices lack basic protective features. Telesky Stories+1 According to the KE‑CIRT/CC’s Q3 report, threat actors repeatedly exploited internet vulnerabilities through poorly patched systems and zero‑day flaws — even targeting supply chains. Kenya Cyber Incident Response Team The use of botnets, particularly for distributed denial-of-service (DDoS) attacks, has also climbed, leveraging insecure IoT devices as their entry point. Communications Authority of Kenya+1
Reactions from industry and government have been swift. The Communications Authority has issued millions of cyber advisory notices and doubled down on calls for stronger cybersecurity hygiene, such as enforcing multi-factor authentication, regular patching, and zero-trust frameworks. Technext+1 Meanwhile, small and medium enterprises — often running on tight budgets — are being urged to prioritise basic cyber readiness, as many lack dedicated security experts. Host Kenya
Looking forward, Kenya’s digital future hinges on closing this IoT security gap. Experts say stricter regulation and security standards for connected devices, combined with more robust public-private collaboration, could help manage the risk. As the country leans into innovations like smart cities and AI-driven services, its ability to safeguard this infrastructure will determine whether Kenya’s tech progress becomes a strength — or a vulnerability.