There is a critical need for advanced cybersecurity measures in the UAE to meet the challenges of increasing complexity and sophistication of cyberattacks, a report said.

Over 223,800 assets hosted within the UAE are potentially exposed to cyberattacks, with half of the critical vulnerabilities remaining unaddressed for over five years.

“This exposure, coupled with the surge in advanced cyberattacks, underscores the absolute necessity of robust cyber defenses in a region that is at the forefront of AI-driven technological innovation and geopolitical significance, the latest report by the UAE Cyber Security Council and CPX, a leading provider of end-to-end cyber and physical security solutions and services, said.

UAE faces sophisticated cyberattacks

The report, titled ‘State of the UAE Cybersecurity Report 2025’, offered an in-depth analysis of the country’s rapidly evolving cyber threat landscape.

The report also examined key trends shaping the current cybersecurity challenges, including misconfiguration, which represents 32 per cent of the cyber incidents, followed by improper usage and unlawful activity at 19 per cent.

The government, finance, and energy sectors are the most targeted by cyber threat actors, it said.

In 2024, drive-by downloads remained a prevalent method for initial entry vectors used by threat actors, with phishing and web server compromises also of concern, the report said, adding that these methods are becoming more sophisticated with the integration of AI tools, enhancing social engineering efforts, phishing lures, and the deployment of deepfake technology to deceive victims.

The trend is compounded by the financial repercussions of data breaches, with the Middle East, including the UAE, recording the second-highest data breach costs globally, the report said.

It said e-crime also remains a significant threat, with the number of ransomware groups operating in the UAE witnessing 58 per cent growth.

On a positive note, from the first half of 2023 to the first half of 2024, the UAE experienced a drastic decrease in distributed denial of service (DDoS) attacks from 58,538 to just 2,301, it said.

Dr. Mohamed Al Kuwaiti, Head of Cyber Security for the UAE Government, said the rise in AI-driven attacks and widening cyber capabilities demand stricter vigilance to secure the future.

“The path forward requires international collaboration, innovation, and commitment,” he said, adding that “together, we will continue building a secure and prosperous digital UAE, where innovation flourishes, opportunities thrive, and our systems remain resilient in the face of any challenge.”

Hadi Anwar, Chief Executive Officer, CPX, said the latest cybersecurity report delves into the strategies, policies, and innovations that are shaping the UAE’s digital transformation, while addressing the complexities of protecting critical infrastructure and sensitive data.

“The country’s remarkable progress in cybersecurity reflects a commitment to creating a secure environment where digital advancements and national resilience go hand in hand,” Anwar said.

Compiled by CPX’s team of cybersecurity experts, the report acts as a strategic guide for government entities, businesses, and individuals, providing actionable insights to navigate the complexities of a new AI era.

Also Read: UAE Savings Scheme Offers Workers Alternative End of Service Benefits and Investment Opportunities