Kenya cyber threats reach 11 billion as DDoS attacks double

Kenya recorded over 11.12 billion cyber threat events during the 2025/2026 financial year, marking a 29% increase from the 8.62 billion threats detected in the previous year. According to reports from the Communications Authority of Kenya (CA), the surge was driven by various forms of digital attacks targeting systems and networks.

Distributed Denial-of-Service (DDoS) attacks saw the most dramatic rise, increasing by 114.3% to approximately 72 million incidents. While activity peaked in the second quarter of the financial year, DDoS attacks saw a significant 90% decline in the final quarter between April and June 2026.

Other notable increases in cyber threats included malware attacks, which rose by 64.8% to over 230 million, and web application attacks, which nearly doubled with a 99% increase. System vulnerability exploits remained the most prevalent category, accounting for over 10.6 billion of the recorded incidents.