🇰🇪Kenya
Africa•Ranked #37 of 188•score 10089% vs global avg·Top 20%
Ransomware
23
Top: qilin
Defacements
6
Top notifier: Antonkill
Critical incidents
2
High-severity ransomware
Severity breakdown
- Crit29%
- High29%
- Med1983%
- Low00%
Ransomware activity over time
2 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2025-67038
Lantronix: Lantronix EDS5000 Code Injection Vulnerability
Added 2026-06-23
- CVE-2026-34910
Ubiquiti: Ubiquiti UniFi OS Improper Input Validation Vulnerability
Added 2026-06-23
- CVE-2026-34909
Ubiquiti: Ubiquiti UniFi OS Path Traversal Vulnerability
Added 2026-06-23
- CVE-2026-34908
Ubiquiti: Ubiquiti UniFi OS Improper Access Control Vulnerability
Added 2026-06-23
- CVE-2026-20253
Splunk: Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Added 2026-06-18
Recent ransomware incidents in Kenya
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-04-30 | bomuhospital.org | Healthcare | krybit | MEDIUM |
| 2026-04-27 | ifmis.go.ke | Public Sector | apt73 | MEDIUM |
| 2026-01-26 | namico.go.ke | Public Sector | tengu | MEDIUM |
| 2025-12-05 | National Health Insurance Management Authority | Healthcare | nova | MEDIUM |
| 2025-10-15 | Turnkey Africa | Technology | qilin | MEDIUM |
| 2025-09-14 | Office Of The Registrar Of Political Parties | Public Sector | qilin | MEDIUM |
| 2025-07-15 | Adrian Kenya | Telecommunication | lynx | MEDIUM |
| 2025-07-09 | Kengen | Energy | qilin | MEDIUM |
| 2025-05-19 | NSSF KENYA | Public Sector | devman | MEDIUM |
| 2025-05-19 | TBD KENYA | Not Found | devman | MEDIUM |
Top targeted sectors
- Public Sector6
- Healthcare3
- Not Found3
- Education3
- Financial Services2
Threat actors active here
- qilin3
- devman2
- ransomhub2
- krybit1
- apt731
Recent defacements
Sister countries — Africa
Score delta vs Kenya (100)