Midday: Kenya cyber cafés, KQ maintenance and Microsoft patches

Kenyan cyber cafés are expected to begin registering customers and retaining session logs from 14 August under a Communications Authority directive. The reported requirement covers identity details and usage records, with retention potentially lasting three years. That creates immediate work for operators, including deciding what systems to use, who can access the records and how long they must be kept securely. Customers using public computers for government services, printing or payments should expect more checks. Operators should confirm the exact notice and applicable exemptions before changing their procedures.

The Nairobi City County Development Control Policy 2026 has introduced a clearer framework for new developments, covering building standards, height limits, environmental requirements and the approval process. The practical effect is that developers and consultants need to check projects against the county policy before submitting or revising applications. The change may reduce uncertainty where approvals previously depended on fragmented requirements, but it also raises the cost of getting drawings, environmental documentation and compliance checks right. Property owners should ask their professionals to identify any transition rules affecting applications already in progress.

Kenya Airways says its maintenance team has completed the airline’s first in house landing gear replacement on a Boeing 787 Dreamliner. The operation required lifting the aircraft, removing and replacing the landing gear, integrating associated systems, testing the work and completing certification. The result matters beyond one aircraft because it demonstrates a deeper maintenance capability at the national carrier and could reduce reliance on overseas facilities for comparable work. Travellers should not read the announcement as a promise of cheaper tickets, but it is a useful operational milestone for KQ’s maintenance business.

A continuing health workers’ strike is disrupting services and leaving patients stranded, according to a report from Nairobi. The effects are practical: delayed consultations, reduced access to routine treatment and pressure on facilities attempting to maintain essential services. Patients with appointments should contact their facility before travelling and seek clear advice on urgent alternatives. Employers with staff relying on public hospitals should expect disruption to medical appointments and documentation. The report does not establish a settlement timetable, so service levels may change quickly as unions and government continue negotiations.

Fresh petroleum shipments have arrived at the ports of Mombasa and Lamu before the Energy and Petroleum Regulatory Authority’s monthly fuel price review. The additional stock should support supply planning for motorists, transport firms and businesses, but it does not determine pump prices by itself. EPRA’s decision depends on the pricing formula and relevant landed costs, taxes and other adjustments. The existing pricing cycle runs through 14 August, so drivers should wait for the official notice rather than rely on predictions from traders or social media when planning fuel purchases.

Kenya’s Virtual Asset Service Providers Regulations 2026 provide a detailed compliance framework for the country’s crypto sector. The rules cover licensing, governance, capital requirements, consumer protection, cybersecurity and enforcement. For exchanges, brokers and other providers, the immediate question is whether their activities fall inside the regulated perimeter and what documentation will be required. Customers should distinguish between a platform operating in Kenya and one merely serving Kenyan users online. The framework also gives regulators more tools to address weak controls, but it does not remove the financial and operational risks of digital assets.

Microsoft’s August security update addresses hundreds of vulnerabilities, including CVE 2026 68820, a use after free flaw in the Windows Ancillary Function Driver for WinSock. Security researchers report that the vulnerability has been exploited in the wild and can allow a lower privileged local attacker to elevate access to SYSTEM. Organisations running Windows should prioritise deployment across endpoints and servers, then confirm that updates completed successfully. Administrators should also review local privilege controls and suspicious activity, because patching closes the defect but does not undo earlier compromise.

Toyota is recalling 508,354 vehicles in the United States, covering certain 2025 and 2026 Camry Hybrid models with a seven inch instrument cluster. The display may fail to show critical information during startup, including warnings and other safety indicators, increasing the risk of a crash or injury. Toyota’s remedy is a free software update through dealers. Owners of imported Camrys should check the vehicle identification number with the manufacturer or an official recall database, because specifications and campaign coverage can differ by market. Do not assume a Kenyan import is excluded without checking.