UAE Energy and Aviation Industries Among Top Targets for Cyberattacks, Official Warns.

UAE Faces Growing Cybersecurity Threats Across Critical Sectors

The United Arab Emirates is facing an increasingly complex cybersecurity environment, with critical parts of the country’s economy and public infrastructure becoming attractive targets for cybercriminals and other malicious actors. Officials have warned that attacks are no longer limited to isolated computer systems or temporary disruptions. Instead, hostile activity is increasingly directed toward the infrastructure and information systems that support essential services and the wider national economy.

Mohamed Al Kuwaiti, Head of Cybersecurity for the UAE government, highlighted the scale of the challenge during a keynote address at GISEC Global. His remarks reflected growing concern among governments around the world that cybersecurity has become closely connected with national security, economic stability and the uninterrupted operation of essential services.

According to Al Kuwaiti, sectors including energy, telecommunications, aviation, government and healthcare are among the areas attracting significant attention from attackers. These industries are particularly important because a successful cyber incident against them could have consequences that extend well beyond an individual organisation.

The UAE has invested heavily in digital transformation, creating a highly connected economy in which government services, businesses, transportation networks, utilities and other public systems increasingly depend on technology. While this digital infrastructure provides significant benefits, it also creates a larger potential attack surface. As more systems become interconnected, a security weakness in one part of the digital ecosystem can potentially create opportunities for attackers elsewhere.

Al Kuwaiti stressed that protecting these systems therefore requires more than simply responding to individual incidents after they occur. Cybersecurity must become part of the design and development process for new technologies and infrastructure.

Critical Infrastructure Increasingly in the Crosshairs

Critical infrastructure has emerged as one of the major areas of concern for cybersecurity authorities. Energy networks, telecommunications systems, aviation infrastructure, healthcare facilities and government platforms all play important roles in maintaining everyday life and economic activity.

An attack against an ordinary business computer may cause financial losses or interrupt operations for a limited period. An attack against critical infrastructure can potentially affect thousands or even millions of people. For that reason, the consequences of such incidents can extend into the physical world.

The energy sector, for example, relies on digital systems to manage production, distribution, monitoring and other operational processes. Telecommunications networks are similarly fundamental to modern society because businesses, government agencies and individuals depend on reliable communications. Aviation also relies extensively on digital technology, from administrative systems and communications to operational and security-related infrastructure.

Healthcare presents another significant concern. Hospitals and medical organisations increasingly depend on digital records, connected equipment and networked systems. Disrupting those technologies can interfere with the delivery of essential services and create serious operational challenges.

Government systems are also an important target because they contain large amounts of information and provide services used by citizens and businesses. As governments continue to move services online, protecting those platforms becomes an increasingly important part of national cyber defence.

The UAE’s cybersecurity leadership has therefore emphasised the need to protect the systems that form the foundation of the country’s digital economy rather than focusing exclusively on conventional information-technology security.

640,000 Cyberattacks Recorded in a Single Day

The scale of attempted cyber activity described by the UAE’s cybersecurity chief illustrates the intensity of the challenge. Al Kuwaiti said the country recorded approximately 640,000 cyberattacks in a single day.

The figure highlights the sheer volume of malicious activity that cybersecurity teams may have to monitor, analyse and respond to. Not every attempted intrusion necessarily results in a successful breach, but the number demonstrates the continuous pressure placed on digital infrastructure.

According to Al Kuwaiti, attackers are interested not only in causing short-term interruptions but also in gaining access to valuable information and systems connected to critical services. Their targets can include data as well as infrastructure associated with electricity, water and economic activity.

This represents an important change in the way cyber threats are viewed. Cybersecurity is no longer simply a technical issue concerning computers, passwords and networks. A sufficiently serious cyber incident can potentially affect public services, businesses, economic activity and national resilience.

For governments, this means that cyber defence has to operate continuously. Organisations cannot assume that their systems are safe simply because no major incident has occurred recently. Attackers can spend significant amounts of time looking for weaknesses, attempting to obtain credentials or identifying ways to move between connected systems.

The enormous volume of attempted attacks also creates another challenge: distinguishing routine malicious activity from threats that require immediate attention. Security teams must use monitoring, automation, threat intelligence and other technologies to identify potentially dangerous activity and respond before it develops into a larger incident.

Artificial Intelligence Is Changing the Threat Landscape

One of the most important developments discussed by Al Kuwaiti was the rapid growth of artificial intelligence. AI is increasingly being incorporated into digital products, business processes and government systems. While these technologies can improve efficiency and create new capabilities, they can also be exploited by attackers.

Artificial intelligence can make certain cyber threats more sophisticated. Attackers can use automated technologies to generate convincing content, improve social-engineering attempts and accelerate parts of the attack process.

Deepfakes are one example. Artificial intelligence can be used to create highly realistic audio, images and video that appear to depict real people. Such technology can potentially be abused to impersonate officials, executives or other trusted individuals.

The challenge is particularly significant for organisations where employees make decisions based on communications that appear to come from senior personnel. A convincing fraudulent message or audio recording could potentially be used as part of a broader attempt to obtain information, manipulate employees or facilitate financial fraud.

AI can also change the speed at which attackers operate. Tasks that previously required considerable manual effort may increasingly be automated. This means defenders have to develop their own automated systems and intelligence capabilities to keep pace.

The result is a continuing technological competition between those attempting to protect digital infrastructure and those attempting to exploit it.

Supply Chains Create Additional Risks

Al Kuwaiti also referred to supply-chain attacks as part of the evolving cybersecurity environment. Modern organisations rarely operate entirely independently from external technology providers. Businesses and government institutions often rely on software developers, cloud platforms, telecommunications providers, contractors and other third parties.

This interconnected structure can create vulnerabilities beyond an organisation’s immediate network.

A company may have strong internal cybersecurity controls while still being exposed through a supplier or service provider that has access to its systems. If attackers compromise a trusted third party, they may attempt to use that relationship as a pathway toward another target.

Supply-chain security is therefore becoming an increasingly important part of cybersecurity planning. Organisations need to understand not only their own infrastructure but also the technologies and external services on which their operations depend.

The problem becomes more complicated as digital ecosystems grow. Software can contain components developed by multiple organisations, while cloud services can connect numerous systems and users. Identifying vulnerabilities across such environments can be difficult.

For critical infrastructure operators, this issue is particularly important because disruption at one supplier can potentially have consequences for several connected organisations.

Cybersecurity and National Security Are Becoming Closely Linked

The UAE’s cybersecurity leadership is increasingly framing cyber resilience as a component of national and economic security. This reflects a broader international trend.

Modern economies depend heavily on digital infrastructure. Financial services, transportation, energy distribution, healthcare, communications and government administration all rely on computer networks and data.

Consequently, a major cyber incident could potentially create economic consequences even when no physical attack occurs. Businesses could face operational interruptions, customers could lose access to services and organisations could incur significant costs associated with investigation and recovery.

For governments, the issue goes even further. Public confidence in digital services depends partly on whether those systems can remain available and secure. Protecting sensitive government information is therefore not merely an information-technology responsibility; it can also be connected with public administration and national resilience.

Cyber resilience focuses on the ability of an organisation or country to prepare for attacks, withstand disruption, recover from incidents and continue operating.

This approach differs from the idea that cybersecurity means preventing every attack. Given the scale and persistence of modern cyber threats, complete prevention may not always be realistic. Resilience instead assumes that organisations must be prepared for the possibility that some attacks will succeed and must have systems in place to limit their impact.

Collective Defence Is Essential

Al Kuwaiti emphasised that governments cannot tackle the cybersecurity challenge on their own. Effective cyber defence requires cooperation between multiple groups.

Government agencies possess information about national-level threats and critical infrastructure. Private companies operate much of the technology and infrastructure that supports economic activity. Technology providers develop the software and hardware on which many systems depend. International partners can provide additional intelligence and expertise.

The broader community also has a role because individuals remain an important part of the cybersecurity environment. Human behaviour can influence whether phishing attempts, social-engineering campaigns and other forms of cybercrime succeed.

Information sharing is particularly important. If one organisation identifies a new type of attack, sharing relevant intelligence with other organisations can allow them to strengthen their defences before they encounter the same threat.

This collaborative approach can help cybersecurity teams move from reacting to individual incidents toward identifying broader patterns of malicious activity.

International cooperation is also increasingly relevant because cyberattacks do not respect national borders. An attacker may operate from one country, use infrastructure located in another and target an organisation thousands of kilometres away.

As a result, governments and businesses need mechanisms for exchanging information, coordinating responses and improving collective preparedness.

Security Needs to Be Built Into Technology From the Beginning

Another key message from the UAE cybersecurity chief was that security should be incorporated into emerging technologies from the outset.

Historically, cybersecurity was sometimes treated as an additional layer that could be added after a product or system had already been developed. As technology becomes more interconnected, that approach can create significant weaknesses.

Security-by-design means considering potential threats during the earliest stages of development. Developers and organisations can examine how a system might be attacked, what information it handles, which components it relies on and how it would respond if something goes wrong.

This approach is particularly relevant to artificial intelligence.

As AI becomes embedded into applications, government systems and commercial technologies, organisations need to consider both the benefits and potential vulnerabilities associated with these systems. Security cannot simply be addressed after deployment.

The same principle applies to autonomous technologies, connected infrastructure and other emerging systems. If security is incorporated from the beginning, organisations may be able to reduce vulnerabilities and improve their ability to respond to future threats.

Looking Beyond Artificial Intelligence

Although AI is currently receiving considerable attention, Al Kuwaiti indicated that the UAE is also preparing for other technological developments that could influence cybersecurity.

Post-quantum security is one of those priorities. The development of quantum computing could eventually change the assumptions behind some existing cryptographic systems. Preparing for that possibility requires organisations to consider how their current security technologies might need to evolve.

The issue is important because upgrading cryptographic infrastructure can be a complex process. Large organisations may operate thousands of systems and devices, making it difficult to replace security technologies quickly.

Preparing in advance can therefore reduce the risk of being caught unprepared if technological capabilities change significantly.

Autonomous systems are another area of interest. As machines and digital systems become increasingly capable of operating with limited human intervention, their security becomes more important. A compromised autonomous system could potentially behave differently from a conventional computer because it may be capable of taking actions automatically.

Agentic AI introduces another dimension. Systems that can independently perform tasks, interact with software and make decisions on behalf of users may offer substantial benefits, but they also create new security questions.

Organisations will need to determine what permissions such systems should receive, how their actions should be monitored and what safeguards should be activated when unexpected behaviour occurs.

Preparing for a More Connected Future

The UAE’s approach reflects the broader challenge facing countries as they accelerate digital transformation. Greater connectivity can improve productivity, public services and economic opportunities, but it also increases dependence on digital infrastructure.

The country’s cybersecurity authorities are therefore dealing with a threat environment that is changing rapidly. Traditional cybercrime remains a concern, while AI, deepfakes, supply-chain vulnerabilities, autonomous systems and future computing technologies introduce additional challenges.

The reported 640,000 attacks in one day demonstrate the scale of activity that security teams may encounter. At the same time, the focus on critical infrastructure shows why cybersecurity is increasingly viewed as a national priority.

Protecting these systems requires multiple layers of defence. Organisations need strong technical controls, trained personnel, effective incident-response plans and continuous monitoring. They also need to understand the risks associated with suppliers and third-party technology.

Government agencies, private companies and technology providers must work together because no individual organisation can become targets of phishing, impersonation and other social-engineering techniques. Better awareness UAE’s cybersecurity strategy, as described by Al Kuwaiti, points toward a broader understanding of digital security. The objective is not simply to stop attacks at the network boundary. It is also to ensure that positioned to determine which assets require the strongest protection. They can also has complete visibility over the entire threat environment.

Cybersecurity awareness among the public is similarly important. Employees and individuals can become targets of phishing, impersonation and other social-engineering techniques. Better awareness can reduce the opportunities available to attackers.

A Shift From Protection to Resilience

The UAE’s cybersecurity strategy, as described by Al Kuwaiti, points toward a broader understanding of digital security. The objective is not simply to stop attacks at the network boundary. It is also to ensure that essential services can continue operating when threats emerge.

This concept of resilience involves preparation before an incident, rapid detection during an attack and effective recovery afterward.

Organisations that understand their most important systems and data are better positioned to determine which assets require the strongest protection. They can also develop plans for maintaining essential operations if certain systems become unavailable.

For critical infrastructure, resilience is particularly important. Electricity, water, telecommunications, healthcare and transportation cannot simply stop functioning while a cybersecurity confronting a cybersecurity environment in which the frequency, sophistication and potential consequences of digital attacks are increasing. Energy, telecommunications, aviation,attacks in a single day illustrates the scale of the activity confronting the country’s digital infrastructure. While not every technology is being integrated into an expanding range of systems while also providing attackers with new tools for automation, impersonation and other UAE is looking beyond today’s threats. Post-quantum security, autonomous systems and agentic Kuwaiti is that cybersecurity cannot be treated as the responsibility of government alone. Businesses, technology companies, international partners and be incorporated into technology from the beginning. Building resilience before an incident occurs can help organisations prepare for disruption, respond more effectively defending computers and networks. It will involve protecting the systems that support economic activity, public services and everyday life. As technology becomes increasingly embedded in those systems, cybersecurity and national resilience will become increasingly interconnected team investigates an incident.

That means cyber planning needs to be closely connected with broader operational planning.

The UAE’s cybersecurity leadership has consequently stressed the importance of preparing for threats that have not yet fully emerged. AI is already transforming cyber operations, but future developments could create entirely new categories of risk.

Conclusion

The UAE is confronting a cybersecurity environment in which the frequency, sophistication and potential consequences of digital attacks are increasing. Energy, telecommunications, aviation, healthcare and government systems remain particularly important because they support essential services and economic activity.

The reported figure of 640,000 cyberattacks in a single day illustrates the scale of the activity confronting the country’s digital infrastructure. While not every attempted attack results in a successful intrusion, the volume highlights the need for continuous monitoring and strong defensive capabilities.

Artificial intelligence is adding another layer of complexity. The technology is being integrated into an expanding range of systems while also providing attackers with new tools for automation, impersonation and other malicious activities. Deepfakes and supply-chain attacks demonstrate how traditional security assumptions are being challenged.

At the same time, the UAE is looking beyond today’s threats. Post-quantum security, autonomous systems and agentic AI are among the emerging areas that could influence cybersecurity in the years ahead.

A central message from Al Kuwaiti is that cybersecurity cannot be treated as the responsibility of government alone. Businesses, technology companies, international partners and individuals all form part of the wider digital ecosystem.

As the UAE continues to expand its digital economy, protecting that ecosystem will require security to be incorporated into technology from the beginning. Building resilience before an incident occurs can help organisations prepare for disruption, respond more effectively when attacks take place and recover more quickly afterward.

The future cybersecurity challenge will therefore involve more than defending computers and networks. It will involve protecting the systems that support economic activity, public services and everyday life. As technology becomes increasingly embedded in those systems, cybersecurity and national resilience will become increasingly interconnected.