- The United Arab Emirates has built one of the most connected digital economies in the world
- Attacks in the UAE rose by 32 per cent in 2024
- The UAE’s cybersecurity market is valued at USD $0.91bn in 2026 and is projected to reach $1.51bn by 2031
The United Arab Emirates has built one of the most connected digital economies in the world, but that connectivity comes with a cost.
As businesses across Dubai, Abu Dhabi and the wider Emirates accelerate their digital transformation, they are exposing themselves to a growing wave of sophisticated cyber threats that are no longer theoretical, but active, targeted and increasingly expensive.
The UAE’s cybersecurity market is valued at USD $0.91bn in 2026 and is projected to reach $1.51bn by 2031, with ransomware remaining the most immediate threat.
Attacks in the UAE rose by 32 per cent in 2024, according to authorities, compared with the previous year, and the trajectory has since continued into 2026.
Financial institutions remain prime targets because of the sensitive data they hold and the potential for large payouts, but telecoms providers, government contractors and healthcare organisations are also firmly in the crosshairs.
According to Microsoft data, 52 per cent of cyberattacks in the UAE are financially motivated, driven largely by ransomware and extortion, meaning that for organisations without robust backup systems or endpoint protection, a single incident can result in days of disruption and losses running into millions.
Alongside ransomware, phishing has evolved into a far more sophisticated threat.
Attackers are now using artificial intelligence to craft highly convincing messages that mimic senior executives or trusted suppliers. These business email compromise attacks are precise and personalised, making them significantly harder for employees to detect.
AI-powered phishing campaigns are designed to bypass traditional security filters, reinforcing the long-standing view that the human element remains the weakest link in cyber defence.
Globally, 86 per cent of major cyber incidents now involve deliberate attempts at business disruption, underscoring the strategic nature of modern cyber conflict.
According to SonicWall’s 2025 Cyber Threat Report, 61 per cent of attackers exploit new vulnerabilities within 48 hours of public disclosure, leaving organisations with little time to identify, test and deploy patches. For many businesses, particularly smaller firms with limited resources, this gap between disclosure and remediation has become one of the most commonly exploited entry points.
The volume of attacks reflects this increasingly hostile environment. The UAE is currently facing between 500,000 and 700,000 cyberattacks each day, particularly targeting strategic sectors, according to Dr Mohammed Al Kuwaiti, chairman of the UAE Cyber Security Council.
He said hostile actors, including Iran, have used artificial intelligence tools such as ChatGPT and other platforms to support cyber operations ranging from reconnaissance and vulnerability detection to phishing campaigns and the creation of malicious software.
He added that artificial intelligence has become a central component of modern cyber warfare, enabling faster, more convincing and lower-cost attacks, including deepfake technology and disinformation campaigns. Despite this, he said the country’s national cyber defence systems are detecting and containing most threats proactively.
“In times of tension, your awareness must be faster than phishing attempts, calmer than rumours and more precise than fabricated content,” he said.
The UAE’s response has been to embed cybersecurity within a broader national resilience strategy.
Authorities have recently strengthened their defensive posture through an integrated framework focused on monitoring, analysis, rapid response and continuous readiness.
Measures include the adoption of a zero-trust model, the activation of the National Cyber Security Operations Centre, advanced threat intelligence systems and nationwide cyber crisis simulation exercises. Security alerts are shared in real time with government entities and key sectors to reduce response times and maintain continuity of essential services.
“The UAE continues to invest in strengthening its cyber capabilities and enhancing its digital infrastructure, ensuring the protection of digital assets and the continuity of critical services, while maintaining a high level of preparedness to counter evolving threats,” Dr Al Kuwaiti said.
