Skip to main content
BilgeQor
Back to industries

CTO, IT Director, Compliance Officer

Public-sector Adjacent Platforms

Verified cyber threat context · Kenya / National KE-CIRT/CC Q2 FY2025–2026

Kenya National KE-CIRT/CC October–December 2025 cyber threat context

Market context — not industry-specific evidence

Communications Authority of Kenya / National KE-CIRT/CC Cyber Security Report Q2 2025-2026 states that 4,559,229,985 cyber threat events were detected during October–December 2025, a 441.27% increase compared with July–September 2025. The report also states that 21,815,814 cyber threat advisories were issued during the same period, a 9.34% increase quarter-on-quarter. Detected threat-attempt counts for October–December 2025: malware threat attempts 70,907,781 (123.85% quarter-on-quarter increase), web application attack attempts 11,570,134 (11.07% increase), brute force attack attempts 42,785,432, mobile application attack attempts 310,009 (303.18% increase), DDoS attacks 58,316,952 (1116.06% increase), and system attacks 4,375,339,677. All figures are October–December 2025 quarterly context and must not be presented as full-year 2025 or annual totals. The 4,559,229,985 value refers to cyber threat events detected by National KE-CIRT/CC and must not be presented as confirmed incidents, successful attacks, breached organisations, or all cyber incidents in Kenya.

Kenya · National KE-CIRT/CC October–December 2025 cyber threat-event, threat-attempt and advisory contextOctober–December 2025 (Q2 FY2025–2026)

Cyber threat events detected by National KE-CIRT/CC — Kenya October–December 2025

4,559,229,985 cyber threat events detected during October–December 2025
4,559,229,985
Unit
cyber threat events detected during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Q2 FY2025–2026 quarterly context. Quarter-on-quarter increase: 441.27% compared with July–September 2025.

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. The 4,559,229,985 value refers to cyber threat events detected by National KE-CIRT/CC and must not be presented as confirmed incidents, successful attacks, breached organisations, or all cyber incidents in Kenya. Not full-year 2025 or annual context.

Quarter-on-quarter increase in detected cyber threat events — Kenya October–December 2025

441.27% increase in detected cyber threat events compared with July–September 2025
441.27%
Unit
percent increase in detected cyber threat events compared with July-September 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC Q2 FY2025–2026 quarterly comparison context only. The 441.27% figure refers to the quarter-on-quarter change from July–September 2025 to October–December 2025 and must not be presented as a full-year 2025 change or as evidence of confirmed incident growth.

Cyber threat advisories issued by National KE-CIRT/CC — Kenya October–December 2025

21,815,814 cyber threat advisories issued during October–December 2025
21,815,814
Unit
cyber threat advisories issued during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Q2 FY2025–2026 quarterly context. Quarter-on-quarter increase: 9.34% compared with July–September 2025.

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. The 21,815,814 value refers to cyber threat advisories issued in response to detected threat events and must not be presented as incidents, attacks, protected organisations, or proof of protection. Not full-year 2025 or annual context.

Quarter-on-quarter increase in cyber threat advisories — Kenya October–December 2025

9.34% increase in cyber threat advisories compared with July–September 2025
9.34%
Unit
percent increase in cyber threat advisories compared with July-September 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC Q2 FY2025–2026 quarterly comparison context only. Must not be presented as full-year 2025 change or advisory effectiveness evidence.

System attacks detected — Kenya October–December 2025

4,375,339,677 system attacks during October–December 2025
4,375,339,677
Unit
system attacks during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. Must not be presented as confirmed system compromises, all system attacks in Kenya, or annual totals.

DDoS attacks detected — Kenya October–December 2025

58,316,952 DDoS attacks during October–December 2025
58,316,952
Unit
DDoS attacks during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. Must not be presented as all DDoS attacks in Kenya or annual totals.

Malware threat attempts detected — Kenya October–December 2025

70,907,781 malware threat attempts during October–December 2025
70,907,781
Unit
malware threat attempts during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. Must not be presented as all malware incidents in Kenya or annual totals.

Brute force attack attempts detected — Kenya October–December 2025

42,785,432 brute force attack attempts during October–December 2025
42,785,432
Unit
brute force attack attempts during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. Must not be presented as all brute force incidents in Kenya or annual totals.

Web application attack attempts detected — Kenya October–December 2025

11,570,134 web application attack attempts during October–December 2025
11,570,134
Unit
web application attack attempts during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. Must not be presented as all web application incidents in Kenya or annual totals.

Mobile application attack attempts detected — Kenya October–December 2025

310,009 mobile application attack attempts during October–December 2025
310,009
Unit
mobile application attack attempts during October-December 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC October–December 2025 quarterly context only. Must not be presented as all mobile application incidents in Kenya or annual totals.

Quarter-on-quarter attack-type increases — Kenya October–December 2025 vs July–September 2025

Malware threat attempts — 123.85% quarter-on-quarter increase
123.85%
Unit
percent increase in malware threat attempts compared with July-September 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context
Web application attack attempts — 11.07% quarter-on-quarter increase
11.07%
Unit
percent increase in web application attack attempts compared with July-September 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context
Mobile application attack attempts — 303.18% quarter-on-quarter increase
303.18%
Unit
percent increase in mobile application attack attempts compared with July-September 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context
DDoS attacks — 1116.06% quarter-on-quarter increase
1,116.06%
Unit
percent increase in DDoS attacks compared with July-September 2025
Period
Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Scope
Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat context

Kenya National KE-CIRT/CC Q2 FY2025–2026 quarterly comparison context only. All percentage values refer to the quarter-on-quarter change from July–September 2025 to October–December 2025 and must not be presented as full-year 2025 changes, confirmed incident rate increases, or all-sector attack prevalence in Kenya.

Source: Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026

Scope: Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026. All admitted metrics are October–December 2025 quarterly context; quarter-on-quarter comparisons reference July–September 2025. The 4,559,229,985 value refers to cyber threat events detected by National KE-CIRT/CC and must not be presented as confirmed incidents, successful attacks, breached organisations, or all cyber incidents in Kenya. The 21,815,814 value refers to cyber threat advisories issued in response to detected threat events and must not be presented as incidents, attacks, protected organisations, or proof of protection. Do not present any admitted indicator as total Kenyan business incident prevalence, hidden incident prevalence, population-wide victimisation rate, all-sector incident rate, confirmed compromise count, breached-organisation count, compliance achievement, certification, proof of security, or guaranteed protection.

Methodology: Official Communications Authority of Kenya / National KE-CIRT/CC statistics published in Cyber Security Report Q2 2025-2026 covering October-December 2025. The 4,559,229,985 value refers to cyber threat events detected by National KE-CIRT/CC during October-December 2025 and must not be presented as confirmed incidents, successful attacks, breached organisations, or all cyber incidents in Kenya. The 21,815,814 value refers to cyber threat advisories issued in response to detected threat events and must not be presented as incidents, attacks, protected organisations, or proof of protection. All admitted Kenya metrics are October-December 2025 quarterly context. Do not present them as full-year 2025 or annual totals. Quarter-on-quarter comparisons reference July-September 2025. Do not present any admitted indicator as total Kenyan business incident prevalence, hidden incident prevalence, population-wide victimisation rate, all-sector incident rate, confirmed compromise count, breached-organisation count, compliance achievement, certification, proof of security, or guaranteed protection.

Accessible data table
Verified Kenya National KE-CIRT/CC October–December 2025 cyber threat context data from Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026, reporting period Kenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context..
MetricValueSourceScopeReporting period
4,559,229,985 cyber threat events detected during October–December 20254,559,229,985 cyber threat events detected during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
441.27% increase in detected cyber threat events compared with July–September 2025441.27% percent increase in detected cyber threat events compared with July-September 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
21,815,814 cyber threat advisories issued during October–December 202521,815,814 cyber threat advisories issued during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
9.34% increase in cyber threat advisories compared with July–September 20259.34% percent increase in cyber threat advisories compared with July-September 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
4,375,339,677 system attacks during October–December 20254,375,339,677 system attacks during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
58,316,952 DDoS attacks during October–December 202558,316,952 DDoS attacks during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
70,907,781 malware threat attempts during October–December 202570,907,781 malware threat attempts during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
42,785,432 brute force attack attempts during October–December 202542,785,432 brute force attack attempts during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
11,570,134 web application attack attempts during October–December 202511,570,134 web application attack attempts during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
310,009 mobile application attack attempts during October–December 2025310,009 mobile application attack attempts during October-December 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Malware threat attempts — 123.85% quarter-on-quarter increase123.85% percent increase in malware threat attempts compared with July-September 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Web application attack attempts — 11.07% quarter-on-quarter increase11.07% percent increase in web application attack attempts compared with July-September 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
Mobile application attack attempts — 303.18% quarter-on-quarter increase303.18% percent increase in mobile application attack attempts compared with July-September 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.
DDoS attacks — 1116.06% quarter-on-quarter increase1,116.06% percent increase in DDoS attacks compared with July-September 2025Communications Authority of Kenya / National KE-CIRT/CC, Cyber Security Report Q2 2025-2026, 2026Kenya National KE-CIRT/CC Q2 FY2025–2026 cyber threat contextKenya National KE-CIRT/CC October-December 2025 quarterly cyber threat-event, threat-attempt and advisory context.

Relevant loss and exposure areas

These existing industry scoping prompts help frame a proposal. They do not assert an incident, loss, or market-specific condition.

Industry themes

  • Data Breaches
  • Compliance Violations
  • Service Disruption

Digital surfaces in scope

Citizen PortalsGrant DashboardsData Repositories

What structured security support changes

The Security File turns risk signals into decisions.

Official market data shows where risk exists. The BilgeQor Security File connects that context to your real websites, apps, accounts, payment flows and team responsibilities, so leaders can decide what to fix first.

Why this matters

The file gives your team one place to understand what was reviewed, what matters, what changed, and what still needs a decision.

BilgeQor Method

What the Security File contains

A Security File is not a generic report. It is a structured decision record for the assets, workflows and risks covered by the agreed scope.

01

Market and sector context

We connect official market signals and industry exposure to the business surfaces in scope.

02

Exposure map

We map websites, apps, accounts, payment journeys, admin roles, vendors and customer-facing workflows.

03

Priority register

We separate urgent risks, important improvements and lower-priority findings so the next action is clear.

04

Executive summary

We provide a concise summary that leadership, operations, vendors or insurers can read without needing raw technical detail.

05

Remediation roadmap

We turn findings into a 14 / 30 / 90-day action path with ownership, evidence notes and follow-through guidance.

What it is not

  • Not a guarantee of perfect security.
  • Not a certification or compliance verdict.
  • Not a per-company loss estimate or fear-based claim.