The Communications Authority of Kenya said it detected 11,124,632,684 cyber threat events through the National KE-CIRT/CC in the 2025/26 financial year.
That total represents an increase from roughly 8.62 billion events recorded in the 2024/25 year, a rise of about 29 per cent according to the Authority’s sector statistics.
The Authority’s monitoring function records activity across several categories, including attempts to exploit system vulnerabilities and other malicious network behaviour.
In the April-June 2025 quarter the National KE-CIRT/CC reported more than 4.5 billion events, which was over 80 per cent higher than the January-March 2025 period.
The reported figure counts detected threat events rather than successful intrusions or confirmed data breaches.
A threat event may refer to traffic linked to an exploitation attempt or a pattern matching a known threat, and a single campaign can generate many such events.
Detection systems can block suspicious traffic at firewalls, stop malicious files on endpoints, or later confirm that an attacker accessed a system, meaning the count does not equate to real-world harm.
The quarterly cyber security report also highlighted ransomware, data breaches, distributed denial-of-service activity and social engineering as the main types of threats observed in Kenya’s digital environment.
The Authority’s data can help organisations gauge the broader threat landscape and decide where to focus their own security investigations.
