Kenyan organisations are being targeted mostly through old, avoidable weaknesses rather than new or advanced techniques, a new report by cybersecurity firm ESET has found.