- New research shows surge in brute-force cyberattacks targeting network infrastructure
- Barracuda Networks shows that nearly 90 per cent of brute-force authentication attacks occurred in the Middle East
- The attacks largely focused on edge devices such as firewalls and VPNs
A surge in brute-force cyberattacks targeting network infrastructure in early 2026 is putting fresh pressure on organisations across the Middle East.
New research from Barracuda Networks shows that nearly 90 per cent of brute-force authentication attacks recorded between February and March originated from locations in the Middle East.
The attacks largely focused on edge devices such as firewalls and VPNs, with systems from SonicWall and Fortinet emerging as the main targets.
“These attacks were identified based on the geo-location of the IPs involved, nearly all originating from the Middle East,” Anthony Fusco, manager of cybersecurity analysts at Barracuda, told Cybersecurity Dive recently.
Fusco noted that IP addresses alone are not considered a reliable indicator, but said it was ‘safe to assume’ that a combination of state-linked and professional groups was involved.
Researchers say hackers have been aggressively scanning perimeter devices for weak or exposed credentials, taking advantage of the fact that these systems act as gateways into wider corporate networks.
Because they sit at the edge of remote access, they are often seen as high-value entry points.
The spike in activity has also come at a sensitive time, as it coincided with heightened geopolitical tensions in the region, as well as a time where the predicted growth of the market is at an important junction.
According to MarketsandMarkets, the Middle East and Africa cybersecurity market is expected to grow from USD $25.02 billion in 2025 to USD $39.98 billion by 2030, caused by widespread digital transformation and government-led initiatives.
Countries such as the United Arab Emirates and Saudi Arabia are investing heavily in digital infrastructure, cloud platforms and national cybersecurity strategies as part of broader economic diversification plans.
At the same time, the threat landscape is becoming more demanding, as ransomware continues to account for a significant share of attacks, while distributed denial-of-service incidents have also skyrocketed.
Per the report, sectors such as energy, telecoms and financial services remain prime targets due to the critical nature of their operations.
At such an important time in the industry, Barracuda is urging organisations to enforce multi-factor authentication on firewalls and VPNs, use strong passwords and monitor repeated failed login attempts more closely.
