The UAE Cyber Security Council, in collaboration with CPX, a leading provider of comprehensive cyber and physical security solutions, has unveiled the ‘State of the UAE Cybersecurity Report 2025.’ This report provides a detailed analysis of the UAE’s rapidly evolving cyber threat landscape, highlighting the urgent need for advanced cybersecurity measures in response to increasingly sophisticated cyber-attacks.
As cyber threats escalate, the report underscores a critical issue: over 223,800 assets hosted within the UAE are vulnerable to cyber-attacks, with half of these critical vulnerabilities remaining unaddressed for over five years. This exposure, coupled with the rise in cyber-attacks, emphasizes the pressing need for robust cyber defenses, especially in a region known for AI-driven technological innovation and geopolitical importance.
Key findings from the report reveal that misconfiguration accounts for 32% of cyber incidents, followed by improper usage and unlawful activity at 19%. Government, finance, and energy sectors are the most targeted by cyber threat actors. In 2024, drive-by downloads, phishing, and web server compromises continued to serve as primary entry vectors for cybercriminals, with AI tools now enhancing social engineering tactics, phishing schemes, and the deployment of deepfake technology.
The financial impact of cyber-attacks is also a significant concern, with the Middle East, including the UAE, recording the second-highest data breach costs globally. Ransomware activity has also surged, with the number of ransomware groups operating in the UAE growing by 58%. However, there is positive news: from the first half of 2023 to the first half of 2024, DDoS attacks dropped drastically from 58,538 to just 2,301.
H.E. Dr. Mohamed Al Kuwaiti, Head of Cyber Security for the UAE Government, emphasized the importance of international collaboration and innovation in securing the country’s digital future, particularly in the face of rising AI-driven cyber threats. “Together, we will continue building a secure and prosperous digital UAE, where innovation flourishes and our systems remain resilient,” he said.
Hadi Anwar, CEO of CPX, highlighted the role of the report in shaping strategies, policies, and innovations aimed at addressing the UAE’s cybersecurity challenges. “The country’s progress in cybersecurity reflects its commitment to creating a secure environment for digital advancements and national resilience,” he added.
The report also outlines the increasing risks posed by AI-powered threats and advanced persistent threats (APTs), with state-sponsored actors incorporating AI into their attack frameworks. It stresses the need for enhanced defense capabilities and a culture of cybersecurity awareness across all sectors.
Compiled by CPX’s team of cybersecurity experts, the report offers actionable insights for government entities, businesses, and individuals navigating the complexities of the new AI-driven cybersecurity landscape. Best practices recommended to mitigate cyber risks include:
As the UAE leads the way in digital transformation, the report stresses that addressing cybersecurity challenges requires a collaborative effort from government agencies, private sector entities, and individuals to safeguard the nation’s digital landscape.