Kenya has been identified as the second most vulnerable African country to cyberattacks, accounting for 11.9% of exploitable digital security weaknesses detected in 2025, according to Interpol's African Cyberthreat Assessment Report 2026.
The report, which surveyed 36 African nations, highlights South Africa as the continent's most exposed country with 43.6% of vulnerabilities, followed by Kenya and Nigeria at 9.1%. Interpol attributes Kenya's high risk to inadequate cybersecurity measures, limited investment in digital defence, and delayed software updates across both public institutions and private enterprises.
Common Security Weaknesses Exploited
Cybercriminals are capitalising on outdated internet router firmware, unsecured virtual private networks (VPNs), and vulnerabilities in online document management systems to gain unauthorised access to sensitive information. The report stresses that these are well-known, easily exploitable security gaps rather than new or complex threats.
Consequences for Kenya include widespread data breaches that fuel identity theft, financial fraud, and ransomware attacks targeting businesses and government agencies.
Artificial Intelligence's Role in Accelerating Cybercrime
Interpol's findings reveal that Artificial Intelligence (AI) now facilitates 55% of reported cybercrimes across Africa. AI enables faster, more scalable attacks that are increasingly difficult to detect and counteract.
The rapid expansion of digital infrastructure, with over 1.1 billion mobile subscribers recorded in Africa in 2025, has broadened the attack surface for cybercriminals. However, the report notes that many African countries, including Kenya, have fragmented cybercrime laws and low AI-readiness among law enforcement, complicating effective responses.
Policy Developments in Kenya
In response to these challenges, Kenya's Ministry of Information, Communications, and the Digital Economy has released a draft AI and Emerging Technologies Policy. This initiative seeks public input to help regulate AI use, foster innovation, and strengthen the nation's economic resilience amid rapid technological advancement.