Kenya recorded more than 2.3 billion cyber threat events targeting internet users between April and June 2026, according to the Communications Authority of Kenya's latest Cybersecurity Report.
Although this represented a 30.03 per cent decline from the previous quarter, cybercrime remains a major concern as attackers continue to exploit vulnerabilities across digital systems.
System attacks accounted for the overwhelming majority, with more than 2.25 billion incidents detected during the three-month period.
Malware attacks followed at nearly 59 million, while brute-force attacks reached over 24 million.
Web application attacks totalled more than 17.4 million, with Distributed Denial of Service (DDoS) and mobile application attacks also posing significant risks.
The report attributes the continued threats to inadequate system patching, limited public awareness of phishing and social engineering scams, and the growing use of artificial intelligence and machine learning by cybercriminals.
The Communications Authority urged organisations and internet users to strengthen cybersecurity by regularly updating systems, adopting strong authentication measures, and improving awareness to reduce exposure to increasingly sophisticated online attacks.
