- The UAE Cyber Security Council has issued a fresh warning over weaknesses in everyday cybersecurity practices
- It linked routine user behaviour not only to data exposure but also to a rise in digital identity theft
- The warning comes as part of its latest guidance under the Cyber Pulse campaign
The UAE Cyber Security Council has issued a fresh warning over weaknesses in everyday cybersecurity practices, linking routine user behaviour not only to data exposure but also to a rise in digital identity theft.
In its latest guidance under the Cyber Pulse campaign, the Council said that despite continued investment in cloud technologies and digital tools, basic lapses remain a significant source of vulnerability.
It cited data suggesting that between 68 per cent and 77 per cent of privately shared files may still be accessible to unintended users, revealing the risks associated with default privacy settings in cloud environments.
At the same time, the Council raised concerns about the growing threat of identity-related cybercrime.
It warned that as many as one in three individuals could be exposed to digital identity theft, driven by the increasing volume of personal information shared across online platforms and social media.
In a separate practical guide, the Council described digital identity as ‘one of the most valuable assets’ held by individuals and organisations. This includes highly sensitive data such as personal details, financial records and health information, all of which are increasingly targeted by cybercriminals.
The risk, they say, is increasing with the adoption of new technologies.
The Council said the widespread use of artificial intelligence, Internet of Things (IoT) devices and cloud-based applications has expanded the attack surface, making digital identities easier to exploit.
According to the experts, criminals are using these entry points for impersonation, fraud, and the sale of stolen data on illicit markets.
However, cyberattacks targeting digital identities are continuing to become a problem, as the latest figures show that ID targeting rose by 32 per cent in the first half of the year.
The Council explained that Cloud storage alone does not guarantee security, particularly when data is shared or transmitted across networks. Without encryption, sensitive information remains vulnerable to interception or unauthorised access.
Alongside this, the Council stressed the importance of established protective measures, including strong and regularly updated passwords, restricted sharing settings and routine privacy audits.
It noted that 97 per cent of cyberattacks rely on passwords, underscoring the importance of credential security.
Multi-factor authentication (MFA) was identified as one of the most effective defences, capable of preventing more than 99 per cent of identity-based attacks.
However, officials also stated that tools like MFA are only effective when consistently used.
The Council went on to address the staggering number of social media cases.
According to the notice, 40 per cent of social media users in the UAE are estimated to have experienced account breaches after sharing personal information online.
Beyond immediate data loss, the consequences of identity breaches can be far-reaching. The Council warned of risks including financial fraud, impersonation, phishing attacks and reputational damage, both for individuals and organisations.
The Council said that adopting such measures is now essential to safeguarding privacy, preventing financial loss, and ensuring the continued reliability of digital services.
