The UAE’s national cyber defences have turned back close to 750,000 attack attempts, according to the country’s Cyber Security Council. The council said energy and education were among the most heavily targeted sectors.
The council said the threats detected and countered by the national cybersecurity system included AI-powered attacks, phishing, denial-of-service and remote code execution attempts. It stressed that the UAE continues to build its national capabilities by using advanced technologies, artificial intelligence among them.
The threats behind the number
The categories the council listed cover a broad range of tactics. Phishing relies on deceiving staff or users into handing over credentials. Denial-of-service attacks flood systems with traffic to knock them offline. Remote code execution is more serious, because it can let an intruder run commands on a victim’s servers. The mention of AI-powered threats reflects a wider shift in which attackers use automation to make scams more convincing and attacks faster.
Raw counts of attempts should be read with care. Most are automated probes that security tools filter out within moments, and they differ from successful breaches. What the figure does show is the constant background pressure on UAE networks, and the council’s message is that the defensive layers held.
Why energy and education
Energy is an obvious target for any adversary. Operational disruption at a producer or utility can have knock-on effects for the wider economy, and sensitive commercial data has high value. Education draws attacks for different reasons: universities and schools hold large volumes of personal records and research, and they often run open, decentralised networks that are harder to lock down.
The pattern is not new. In August, the council said it had thwarted attacks on the aviation, energy and education sectors that used multiple techniques, including attempts to breach systems, target accounts and operational data, and run targeted phishing campaigns. It said intrusion attempts were contained before the attackers could reach their objectives or affect the continuity of vital services.
A tense regional backdrop
The announcements come against a difficult regional security environment, in which the UAE has faced attacks and tension linked to the conflict involving Iran. The council has not, in the statements reviewed, attributed the latest attempts to any state or group, and officials generally avoid naming sources of attacks in public updates. Readers should therefore treat the figure as an indicator of scale rather than evidence of a single campaign.
What businesses and residents can do
For organisations, the council’s repeated message is to strengthen preventive measures and keep systems updated. Practical steps recommended by security specialists include:
- Applying software patches promptly
- Using multi-factor authentication on all key accounts
- Training staff to spot suspicious emails and links
- Backing up critical data offline
- Rehearsing incident-response plans before they are needed
Individual users face a more everyday version of the same risk. Fake delivery messages, bank alerts and job offers remain among the most common ways criminals try to steal money or identities. Anyone who receives an unexpected request for personal details should verify it through an official channel before responding.
Looking ahead
The UAE has invested heavily in cyber capability as it digitises government services and expands its data and AI industries. That strategy raises the stakes, because the more critical services move online, the more valuable a successful intrusion becomes. The latest figure suggests the national system is being tested at scale every day, and that its operators want the public and private sectors to treat security as a shared responsibility.
Comments 1