- According to the latest Data Breach Investigations Report from Verizon, stolen credentials were behind 88 per cent of web application breaches
- Separate research from IBM shows that the average cost of a data breach in the Middle East has climbed above USD $8 million
- Many attacks rely on simple deception, where criminals create fake websites
Across the Gulf, governments and businesses are moving services online at speed.
Residents open bank accounts on their phones, sign contracts digitally, and access government platforms without stepping into an office, but they’ll all have one thing: a password.
According to the latest Data Breach Investigations Report from Verizon, stolen credentials were behind 88 per cent of web application breaches worldwide last year. Separate research from IBM shows that the average cost of a data breach in the Middle East has climbed above USD $8 million.
Many attacks rely on simple deception, where criminals create fake websites that look almost identical to trusted brands such as Microsoft.
Users enter their details, believing they are resetting a password or verifying an account. The information is then used to access email, banking and corporate systems.
For companies, the damage is not only reputational, as Gartner estimates that up to half of all helpdesk calls are related to passwords.
Security upgrades have helped, but not solved the problem.
Multi-factor authentication adds an extra step, yet attackers have found ways around it, including SIM-swap fraud and phishing tools that intercept one-time passcodes.
Biometrics, such as fingerprint and facial recognition, are harder to fake but cannot be changed if compromised.
Governments in the region are already advancing in this area, with innovations like encryption gaining traction.
In the UAE, the UAE Pass provides residents with a secure digital identity for accessing public and private services, and authorities are hopeful it will become a more widely used service.
Analysts say the Middle East’s rapid technology rollout could make it easier to leave passwords behind.
But for now, passwords remain part of everyday life.
