Kenya CyberSecurity & Forensics Association: KCSFA

Kenya CyberSecurity & Forensics Association: KCSFA. Active since 2016. Register & join us here:

[Kenya CyberSecurity & Forensics Association: KCSFA @kcsfa]

Promoting innovation in CyberSpace:

We have an urgent need for local innovation in cyber that addresses our local challenges

This is achievable in different ways, with tangible, evidence-driven value

Join us this week virtually as we delve deeper into this conversation

[Kenya CyberSecurity & Forensics Association: KCSFA @kcsfa]

As a nation, we have made great strides in solutions development within the fintech ecosystem

However, cyberspace is still lagging, and we are heavily dependent on foreign developed solutions

What do you think is one of the factors negatively affecting innovation in cyber

[Ministry of Info, Comms & The Digital Economy KE @MoICTKenya]

CYBERSECURITY ADVISORY ON CRITICAL PHP VULNERABILITIES AFFECTING GOVERNMENT WEBSITES AND WEB APPLICATIONS

[INTERPOL @INTERPOL_HQ]

🚨 Operation Serengeti III dismantles thousands of malicious cyber networks

One of Africa’s largest cybercrime enforcement operations has seen agencies from 21 countries:
🔵 Arrest 1,462 suspects
🔵 Disrupt 10,909 malicious networks
🔵 Recover USD 105 million in illicit funds

Under INTERPOL's coordination, investigators from participating countries joined forces to combat cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion.

Authorities also identified 65,929 victims targeted by cybercriminal networks, underscoring the scale and sophistication of today's digital threats. Financial investigations linked criminal activity to losses exceeding USD 385 million.

➡️ 🔗 https://t.co/jXIjTNSE5J

[Ubuntu @ubuntu]

Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. Ubuntu has released fixes for the affected packages for all supported releases.

Read more: https://t.co/uDs3s8zwju

#Ubuntu #Security #CVE

[FBI Cyber Division @FBICyberDiv]

Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.

The FBI urges organizations to take the following steps now:

➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.

➡️ Immediately update affected PHP installations following the guidance on https://t.co/rDrPSxB3zX. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.

➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.

➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or https://t.co/iqgVZIbCru. Those reports help us identify the actors involved and warn other organizations before they become victims.

For the latest information, follow PHP’s announcement on https://t.co/rDrPSxB3zX, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.

[NSA Cyber @NSACyber]

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

[Kenya CyberSecurity & Forensics Association: KCSFA @kcsfa]

How do we bridge the cyber workforce gap through scholarship & affordable training

Join us tomorrow as we address this urgent matter

When: Oct 22, 2026, 07:30 PM to 8:30 PM EAT

Zoom Registration Link: https://t.co/I9yQBrcLvM

[The Hacker News @TheHackersNews]

‼️ URGENT ‼️ Two CRITICAL, unpatched PHP flaws (CVSS 9.2 each) have triggered an emergency warning after alleged exploit details surfaced online.

Researchers report potential RCE.

CVE-2026-109618 and CVE-2026-109619.

Fixes scheduled for October 21, 14:00 UTC.

Details - https://t.co/jYegMlTtf2

[OFFICE OF THE DATA PROTECTION COMMISSIONER @ODPC_KE]

Think your personal data has been misused? Don’t just wonder what happened. Take action.

Here’s where to start:

1. Secure your account
Change your passwords and secure any accounts that may have been compromised.

2. Preserve the evidence
Keep screenshots, messages, emails or any other information that can help document what happened.

3. Report if a crime occurred
If you suspect criminal activity, report it to the relevant authorities.

4. Lodge a complaint with the ODPC
If your personal data has been mishandled, you can lodge a complaint with the Office of the Data Protection Commissioner.

Know your rights. Know your next step.

Visit https://t.co/eUUMHP0CRB and lodge your complaint today.

Data Yako. Haki Yako.

#LindaMtaani #DataYakoJukumuLako

[Kenya CyberSecurity & Forensics Association: KCSFA @kcsfa]

Happy Mashujaa Day to all our members, non-members, and Kenyan citizens

It's ONLY through courage and boldness that our nation can be transformed into prosperity

We have hope and trust in the investment that was made by our forefathers. We are making an impact through cyber

[@iLabAfrica @iLabAfrica]

A banking app isn't secure just because it works.

Congratulations to Team Kazungu, the Blue Team champions of #JengaSec2026 who took the top spot!

Made up of four student innovators, three from Meru University of Science & Technology and one from @DiscoverJKUAT , the team took on the challenge of developing a secure banking app designed to withstand cyberattacks and minimise vulnerabilities.

They put into practice a vital lesson shared by Frederick Wahome of the Kenya Cyber Security & Forensics Associations (KCSFA): build security in from day one, not after a problem occurs.

Their win is a reminder that great digital solutions must do more than work. They must earn people's trust.

Congratulations, Team Kazungu!

#JengaSec2026 #Cybersecurity #StudentInnovation

@MeruUniversity @kcsfa @SheLeadsTechke
@hackthebox_eu @Isaca_kenya @LOOP_KE
@NCBABankKenya

[National KE-CIRT/CC @KeCIRT]

During #CybersecurityAwarenessMonth, the @KeCIRT reminds you that cyber incidents can affect anyone.

Whether it’s a suspicious message, a hacked account, a phishing attempt, online fraud, impersonation, or any other cyber incident, report it to:

[email protected]
#Kecirt

[Kenya CyberSecurity & Forensics Association: KCSFA @kcsfa]

This week at a glance:
Cyber workforce & skills development
Scholarships availability for cyber professionals
Our collaboration with Unicaf to bridge the skills gap
Training institutions & opportunities in our region

Webinar on 22nd Oct, Register here: https://t.co/Dfex0fJp7r

[The Hacker News @TheHackersNews]

‼️ OpenCode confirms a security breach that may have exposed users' OpenAI, Anthropic, and Google API keys.

1.4% of Console users affected. Some report unauthorized AI usage charges.

OpenCode urges affected users to revoke their keys.

Read - https://t.co/uFjCi9KLNq

[Kenya CyberSecurity & Forensics Association: KCSFA @kcsfa]

The AFYAKe system shutdown by @MOH_Kenya is affecting @MurangaGovt_021, Murang'a County residents, in a negative way

We request that the ministry be committed to the provision and restoration of services through the information system

Web Portal: https://t.co/747yqK8OpY

[Kenya CyberSecurity & Forensics Association: KCSFA @kcsfa]

How do you utilise AI to simplify cyber risk management as a public entity

Join our upcoming empowerment session to gain valuable insights, strengthen your cybersecurity knowledge, and create valuable networks within the industry

Register here: https://t.co/IqK9WQmuRW

[@iLabAfrica @iLabAfrica]

One security oversight could cost you more than a client. It could cost you your career.

At #JengaSec2026, Frederick Wahome of the Kenya Cyber Security and Forensics Association (KCSFA) shared a sobering story of a young innovator whose security solution for a bank led to serious consequences after security had not been built into the system from the start.

His message to student innovators? Build security in from day one, not after a problem occurs.

As the hackathon continues today, the challenge is clear: don't just build solutions that work. Build solutions people can trust.

#CybersecurityKenya

@iLabAfrica @kcsfa @SheLeadsTechke @hackthebox_eu @Isaca_kenya @LOOP_KE @NCBABankKenya @StrathU @ZetechUni @RiaraUniversity @chuka__uni @PU_Kilifi

[@iLabAfrica @iLabAfrica]

Security cannot be an afterthought. It has to start from day one.

At #JengaSec2026, Frederick Wahome, CEO of Kenya Cyber Security and Forensics Association (KCSFA), explores why building security into systems from the start matters.

How can we make secure digital banking the standard? Share your thoughts below!

@kcsfa @SheLeadsTechke @hackthebox_eu
@Isaca_kenya @LOOP_KE @NCBABankKenya
@StrathU @kcsfa

[@iLabAfrica @iLabAfrica]

Four experts, four perspectives and one critical question: should any Kenyan fintech go live without a security review?

At today's hashtag#JengaSec2026, our panel brought together expertise to tackle the security questions that matter.

Meet the speakers:
🔹 Joseph Mwamba — LOOP DFS
🔹 Miki Alkalay — Cyber Security CTO, @AdiliGroup
🔹 Arnold Arinda — Technical Support Engineer
🔹 Talo Harrison — Lecturer, Strathmore University | Cybersecurity education and industry readiness.

From the systems powering fintech to the people securing them, this conversation brings industry and academia to the same table.

Did you any of you guess any of the panel speakers correctly? Tell us in the comments!

@kcsfa @SheLeadsTechke @hackthebox_eu
@Isaca_kenya @LOOP_KE @NCBABankKen