Kenya faces rising cyber threats as AI exposes digital security gaps

Kenya's expanding digital economy is encountering an increasingly complex security risk as cybercriminals utilize technology to target weak systems, businesses, and individuals. The surge in artificial intelligence (AI) adoption is introducing additional risk, enabling cybercriminals to create deceptive messages, impersonate individuals, and automate attacks that were previously more challenging.

According to data from the Communications Authority of Kenya (CA), the National Kenya Computer Incident Response Team Coordination Centre recorded 2.69 billion cyber threat events between July and September 2026, marking a 14.45% rise from the previous quarter. The figures signify the strain on Kenya's digital infrastructure, as government services, financial institutions, and businesses rely more on interconnected online systems.

The regulator also documented 27.4 million web application attack attempts, a 57.62% increase from the preceding quarter, and malware attacks surged by 20.01% to 70.8 million. These statistics underscore the susceptibility of systems managing sensitive personal and financial data, particularly as organizations struggle to keep up with evolving cyber threats.

Jacob Narengo, Principal Administrative Secretary for Internal Security, cautioned that AI is a double-edged tool, capable of enhancing cyber defense while providing criminals with more sophisticated methods to target victims. "AI is a force multiplier, both shield and spear. Threat intelligence is how defenders stay ahead, knowing about the attack before it strikes, so AI can help defenders detect threats in seconds or it can help attackers fake voices, craft convincing scams and target mobile money users," Narengo stated.

The threat landscape for Kenya's digital economy extends beyond merely preventing unauthorized system access; it now involves anticipating attacks, detecting suspicious activity, and responding swiftly to mitigate potential damage. The Communications Authority's latest cybersecurity report highlights AI as a growing tool in phishing, social engineering, credential theft, and other cybercrime activities, noting that AI enables attackers to produce more convincing communications while amplifying the speed and scale of their campaigns.

To effectively combat these emerging threats, the response will require enhanced collaboration between government agencies, regulators, and private enterprises, which frequently possess distinct information about emerging risks. Martin Koyabe, Chairman of the National Cyber Security Agency, emphasized the importance of fostering trust among stakeholders to facilitate productive information sharing, while also emphasizing that digital sovereignty should not be misconstrued as digital isolation, stressing the need for collaboration between regulators and industry participants, including those overseeing the financial sector.

Huawei Sub-Saharan Africa Regional Cybersecurity Expert Lu Hao and Huawei Kenya Country Cybersecurity and Privacy Officer Kaine Zhang further underscored the significance of interconnected security systems, as well as building users' capacity alongside providing secure products and solutions.