Kenya’s Cyber Threats Drop to 842 Million (Q3 2025 Report)

Kenya’s cybersecurity watchdog has revealed that during the third quarter of 2025 (July–September), a staggering 842,320,667 cyber threat events were detected, according to the KE‑CIRT/CC’s latest quarterly report. TechAfrica News The Communications Authority (CA) attributed the threats to weak system patching, low user vigilance against phishing, and the increasing use of AI‑driven attacks. TechAfrica News
The most affected sectors included the government, Internet Service Providers (ISPs), cloud-service operators, and academic institutions. TechAfrica News Among the top threat vectors were web-application attacks, advanced persistent threats (APTs), and malware. TechAfrica News KE‑CIRT/CC recorded more than 10.4 million web-application attacks against government systems, mostly aiming to interfere with databases or steal sensitive information. TechAfrica News Further, nearly 31.7 million malware incidents were uncovered, highlighting the pervasive use of malicious software to exploit weaknesses in unpatched systems. TechAfrica News
The report also sounded the alarm about the growing sophistication of threat actors. Unlike simple, opportunistic hackers, many attackers now use spear-phishing, zero-day vulnerabilities, and supply-chain compromises to infiltrate critical networks. TechAfrica News To counter this evolving threat landscape, KE‑CIRT/CC issued nearly 20 million cyber threat advisories during the quarter — a 15.5% increase compared to the previous period. TechAfrica News Recommendations included enforcing multi-factor authentication, regularly updating software, improving user cyber hygiene, and segmenting networks to detect and respond to APTs early. TechAfrica News
Cybersecurity experts have responded with concern, noting that Kenya’s digital infrastructure remains deeply vulnerable, especially in critical public services. The Star+2Business Daily+2 The scale and nature of the attacks suggest that future cyber defense strategies must go beyond basic protections — with stronger threat intelligence sharing, real-time monitoring, and behavioural analytics now more urgent than ever. As Kenya continues to expand its digital economy, the report underscores a crucial reality: cyber resilience must grow in tandem with connectivity.