In recent years, the UAE has become increasingly aware of the cyber threats it faces, especially as a significant proportion—specifically 71.4%—of these threats are attributed to state-sponsored actors. This alarming statistic, shared by Dr. Mohammed Al Kuwaiti, the head of the UAE Cybersecurity Council, underscores the need for robust national cybersecurity measures to safeguard its digital infrastructure from targeted attacks.
Advanced Cyber Threat Landscape
Dr. Mohammed Al Kuwaiti has highlighted that the UAE possesses a sophisticated and integrated national cybersecurity system capable of detecting and efficiently managing digital threats. This infrastructure is subjected daily to an overwhelming number of cyberattacks, ranging from 90,000 to over 200,000, all of which are thwarted proactively, ensuring that services and data security remain uninterrupted. According to his statements, 71.4% of the identified threats stem from state-supported groups, with advanced persistent threat actors making up 15 of the 21 monitored groups. Organized cybercrime constitutes 14.3%, and hacktivist groups account for the same percentage, indicating a diverse and complex threat environment.
Rising Incidents and Targeted Sectors
Since the beginning of this year, the UAE has recorded 128 cyber threat incidents affecting various entities. These incidents have included ransomware attacks, attempts to breach governmental agencies, and data leaks. Al Kuwaiti noted that all of these cases were managed through unified national response protocols that facilitate rapid containment and risk mitigation. The government and the financial sector have been the most targeted, with threats ranging from website defacement to data leakage, unauthorized access attempts, and organized ransomware attacks.
Digital Rumors and Deepfake Threats
The rise of digital rumors and deepfake technologies has emerged as a significant cybersecurity challenge, directly impacting public trust and institutional reputation. Al Kuwaiti emphasized the continuous surveillance of misleading or fabricated content, particularly targeting the financial and economic sectors or exploiting the names of official personalities. Although there is no official figure for deepfake incidents related to the UAE, the use of manipulated video content is increasing, with instances where public figures appear to engage in fraudulent activities or disseminate false decisions aimed at undermining public trust and impacting market dynamics.
Geopolitical Tensions and Cybersecurity Response
Geopolitical tensions in the Middle East have intensified anti-UAE digital rhetoric, fueled by regional conflicts and diplomatic disputes. With the growing use of artificial intelligence tools, hacktivist groups have become more active in the regional digital space. The tracking of 21 active advanced threat groups and 60 hacktivist cells and cybercriminals indicates that cyberattacks on the UAE’s digital infrastructure primarily originate in Asia, Europe, and South America. Notably, 66.7% of state-supported threat sources come from Asia, while Europe accounts for 14.3%, with the remainder attributed to Middle Eastern or cross-border entities.
The cybersecurity efforts within the UAE are comprehensive, involving an integrated technological and legislative framework that includes early detection, advanced content analysis, community awareness initiatives, and the development of regulatory frameworks for AI applications. The recently approved National Cybersecurity Strategy 2025-2031 provides a roadmap for enhancing the country’s cyberspace security, with a focus on establishing an AI security center of excellence to ensure the safe and ethical use of smart technologies.
Dr. Al Kuwaiti concluded by affirming the UAE’s commitment to investing in national competencies in cybersecurity through specialized programs, leadership academies, and competitive training initiatives, thus reinforcing digital sustainability and national security. In terms of international cooperation, the UAE pursues a proactive policy in enhancing regional and international partnerships in cybersecurity, reflecting its commitment to protecting its national cyberspace while responsibly engaging in international collaboration to confront cross-border threats.