Kenya has experienced a significant surge in web application attacks, with government systems and Internet Service Providers (ISPs) identified as primary targets.

• A 43.7 percent increase in web application attacks was recorded in the three months ending June.
• The Communications Authority of Kenya (CA) reported that attackers are exploiting weak security configurations, outdated software, and coding flaws.
• Key vulnerabilities exploited include weaknesses in SSL/TLS security configurations, unauthenticated remote-code execution, and reflected cross-site scripting.