Kenya is grappling with a dramatic surge in cybercrime, as the country recorded a staggering 201.7% rise in cybersecurity threats within the first quarter of 2025.
- Kenya recorded a 201.7% increase in cybersecurity threats during Q1 2025, reaching 2.5 billion incidents.
- The Communications Authority of Kenya issued 13.2 million advisories, up 14.2% from the previous quarter, to address these threats.
- Artificial intelligence is enabling more rapid and sophisticated cyber threats, as noted by the World Economic Forum.
According to the latest sector statistics released by the Communications Authority of Kenya (CA), cyber threats skyrocketed to 2.5 billion incidents, up from 840.9 million in the previous quarter.
This alarming rise is one of the sharpest in recent years and highlights growing vulnerabilities across critical sectors such as finance, telecommunications, and government systems.
Spike in advisories and vulnerabilities
SEE ALSO: FBI clears Ghana’s extradition request for most wanted former finance minister
In response, the CA issued 13.2 million cybersecurity advisories, marking a 14.2% increase from 11.6 million advisories the previous quarter.
The most significant growth was observed in system vulnerabilities, which surged by 228.3% to 2.47 billion threats, compared to 752.4 million previously. These vulnerabilities include unpatched software, weak passwords, outdated encryption methods, and insecure network configurations, common weaknesses that attackers exploit to gain access.
Web application attacks, targeting vulnerabilities in websites and online platforms, also rose by 11.8%, reaching 5.08 million threats. These attacks often aim to steal data, disrupt services, or gain unauthorised access.
Decline in other attack types
Interestingly, not all threat categories saw an increase. The report notes a decline in several traditional cyberattack methods:
- DDoS (Distributed Denial of Service) attacks: down by 76%
- Mobile application attacks: down by 51%
- Malware: down by 28%
- Brute force attacks: down by 3%
The rise in cyber threats is attributed in part to the increasing sophistication of cybercriminal networks. A study by the World Economic Forum (WEF) reveals that cyberattacks now take less than four days to execute, compared to about 60 days in 2019.
According to the WEF, this speed is driven by artificial intelligence (AI) technologies, which are now being used by threat actors to write code and generate more sophisticated forms of malware and ransomware.
“Threat actors are already using AI-powered language models like ChatGPT to write code,” the report states. “Generative AI is helping even less experienced hackers create new ransomware strains, significantly increasing attack volumes.”
SEE ALSO: Ghana’s President scraps fuel allowances for all political appointees
The WEF also warns that the widespread ownership of smartphones, laptops, and tablets is creating a vast attack surface for cybercriminals.
“We expect increased use of AI by malicious actors in the near future,” the report concludes, “making it urgent to implement stronger, more adaptive cybersecurity measures.”
