UAE cybersecurity 2025: Tackling AI-driven threats and rising cyber risks

The UAE Cyber Security Council and CPX have released the State of the UAE Cybersecurity Report 2025, analyzing the country's evolving cyber threat landscape. The report highlights increasing cyber threats and the need for enhanced security measures.

Over 223,800 assets in the UAE are potentially exposed to cyber-attacks, with half of critical vulnerabilities unaddressed for over five years. Misconfiguration accounts for 32% of incidents, followed by improper usage and unlawful activity at 19%. Government, finance, and energy sectors remain top targets. Drive-by downloads, phishing, and AI-enhanced deepfake technology continue to pose major risks.

The Middle East, including the UAE, records the second-highest data breach costs globally. Ransomware activity has surged by 58%, though DDoS attacks dropped from 58,538 in early 2023 to 2,301 in early 2024.

Mohamed Al Kuwaiti, Head of Cyber Security for the UAE Government, emphasized the importance of vigilance and collaboration to address rising AI-driven attacks. CPX CEO Hadi Anwar highlighted the UAE’s commitment to securing digital advancements and critical infrastructure.

The report stresses the need for cybersecurity awareness, regular audits, real-time threat monitoring, and AI governance frameworks. As the UAE continues its digital transformation, collaboration among government, businesses, and individuals is crucial for strengthening national cybersecurity resilience.