Kenyan households are confronting a worrying increase in device security risks as cybercriminals increasingly target smart TVs, Android-based set-top boxes and related connected devices, according to the latest cybersecurity data. The surge in attacks reveals how everyday entertainment hardware is becoming a new attack surface for threat actors looking to exploit weak credentials and outdated software, challenging consumers and businesses alike to strengthen digital defenses.

Smart TVs and set-top boxes emerge as prominent cybercrime targets

The Communications Authority’s second-quarter 2025/26 Cyber Security Report shows a dramatic rise in cyberattack attempts targeting end-user devices in Kenya from October to December 2025. More than 310,000 attacks were recorded during that quarter, a sharp 303 percent increase compared with the July–September period. Among the most targeted systems were Android smartphones, Android-based TVs, set-top boxes and Google TV applications, all of which are widely used in Kenyan homes.

Experts point to common vulnerabilities that are being exploited. Many smart TVs and set-top boxes operate on outdated firmware, ship with weak or default passwords, and include poorly configured applications. These security gaps allow unauthorized access, enabling attackers to intercept data, compromise networks, or install malicious software that can disrupt operations or expose sensitive user information.

Also Read: How AI-Ready Analytics are Reshaping Middle East Enterprises

Dr Stanley Githinji, assistant professor of information systems security at USIU-Africa, noted that these consumer devices often lack robust authentication and encryption, making them attractive targets for threat actors. “Devices like Android TVs and set-top boxes are frequently overlooked in household cybersecurity strategies, yet their vulnerabilities can provide an entry point into home networks,” he said.

The issue is not unique to Kenya. Global cybersecurity reports have repeatedly shown that connected entertainment devices such as smart TVs, streaming boxes and Internet of Things (IoT) endpoints are increasingly being exploited. Attackers typically leverage improper credential management, insecure authentication mechanisms, and unpatched systems to gain control and propagate malware — behaviors that directly heighten device security risks for users.

In many cases, the threats targeting smart TVs and set-top boxes intersect with broader weaknesses in home networks. Unsecured routers, shared IP addresses, and default network settings can make it easier for attackers to escalate access from one compromised device to others on the same network. A lack of user awareness about basic cybersecurity hygiene further compounds these risks.

Implications for consumers and the broader digital economy

The increase in attacks targeting everyday entertainment hardware underscores how the digital economy’s expansion brings new responsibilities for cybersecurity. With device prices falling and internet penetration rising, more households are embracing connected TVs, set-top boxes and streaming platforms. However, this adoption comes with a need for improved security awareness.

For businesses — particularly manufacturers, software developers, ISPs and retailers — the trend highlights the importance of embedding stronger security features into devices before they reach the market. Providing clear guidance on safe configuration and maintenance can reduce vulnerabilities and protect consumers from avoidable breaches.

At the same time, regulators and policymakers must continue to refine frameworks that promote secure device ecosystems, support swift incident reporting, and enable cross-sector collaboration in threat intelligence sharing. Authorities say strengthening public cyber awareness is equally important, as informed users are better equipped to recognize and respond to threats before they escalate.

As Kenya’s digital landscape evolves, the rise in attacks against smart TVs and set-top boxes signals a broader shift in how cybercriminals operate. Understanding and mitigating device security risks will be critical for maintaining trust in connected technologies and safeguarding the personal and financial data that increasingly travel through home networks.