UAE ranks sixth globally among targets of cyberattacks

The United Arab Emirates placed sixth globally among countries facing cybercriminal activity affecting Microsoft’s customers between January and June this year, a ranking that carries weight for every resident, business and public institution that depends on digital services in daily life. The United States topped the list, followed by Israel, Ukraine, Taiwan and the United Kingdom, as The National reports. More detail on the ranking is available at https://ua.news/en/world/microsoft-postavila-oae-na-shoste-mitse-sered-tsilei-kiberatak-the-national.

The frequency with which a country’s systems come under attack is not an abstract statistic. It speaks to the security of the services citizens and residents rely on, from government platforms to the digital infrastructure underpinning industry. India, Japan, Canada, Germany, Australia and the Philippines rounded out the 12 countries most frequently targeted by cyberthreats, placing the UAE in the company of some of the world’s most digitally connected economies.

Additional reference context is available at https://ua.news/en/world/microsoft-postavila-oae-na-shoste-mistse-sered-tsilei-kiberatak-the-national.

Microsoft said the data are particularly significant for the Emirates at a moment when the country is expanding the use of artificial intelligence in both the public sector and industry. That expansion, while promising greater efficiency and capability, also raises the stakes for protecting the systems through which people interact with the state and with essential services.

What changed in practice: Microsoft framed its findings as a basis for deepening cooperation with the UAE in countering hacker attacks, cybercrime and other digital threats. Together with the UAE Cyber Security Council and Core42, Microsoft announced plans to deploy MDASH, an artificial intelligence-based cybersecurity capability, in Emirati government institutions. According to the company, this further cooperation should help identify priority risks and respond to emerging threats more quickly and at greater scale. For the public, the practical significance lies in whether government systems can withstand intrusion attempts and continue functioning reliably for the people who use them.

The report also shed light on where the pressure is coming from. Microsoft said the UAE was the third most attacked country among the targets of hackers the company links to Iran, with only the United States and Israel ranking higher on that list. The analysis noted that an internet shutdown self-imposed by Iran, which lasted until May, caused a slight decline in cyberattacks Microsoft links to Tehran, though that activity later resumed.

Meanwhile, the methods described by Microsoft are a reminder that much of the risk stems from weaknesses that can be addressed. Cyber groups linked to the Iranian state, the company stated, primarily exploit known vulnerabilities, weak authentication and internet-exposed systems. They also rely on credential theft and phishing to gain initial access. In other words, the threats reaching organizations and, by extension, the public services they run, often take advantage of gaps that are already documented and, in principle, fixable.

Microsoft’s cybersecurity director in the UAE, Yazan Hasaoune, stressed that protection must be embedded in organizations’ approaches to implementing artificial intelligence, identity management, data protection and ensuring business continuity. His point underscores a broader concern for the general public: as more of daily life moves onto digital platforms, the resilience of those platforms becomes a matter of public wellbeing, not merely a technical question for specialists.

For residents of the UAE, the report is a measure of exposure. A country that ranks among the most attacked in the world, and third among targets of Iran-linked groups, faces sustained pressure on the systems that hold personal data, deliver public services and keep businesses running. The response described by Microsoft and its Emirati partners, from AI-driven defence tools in government institutions to closer coordination with the Cyber Security Council, will be judged by a simple standard: whether ordinary people can continue to trust and use the digital services on which their health, safety and everyday affairs increasingly depend.