UAE: 640,000 cyberattacks per day, ransomware and deepfakes threaten critical infrastructure

United Arab Emirates Records 640,000 Cyberattacks in a Single Day

The United Arab Emirates suffered 640,000 cyberattacks in a single day, according to Mohamed Al Kuwaiti, president of the UAE Cybersecurity Council. The revelation, made during the Arab Media Summit in Dubai, underscores the extent of threats targeting governments, companies, and critical infrastructure. The attacks aim at strategic sectors such as electricity, water supply, and technological operating systems, with a potential impact beyond mere temporary service interruptions.

Quick Response

Critical Sectors in the Crosshairs of Hackers

The attacks targeted vital infrastructures such as electricity, water, and technological operating systems, with potential damage beyond temporary service interruptions. Al Kuwaiti highlighted how aggressors are exploiting advanced technologies such as ransomware, artificial intelligence, and content manipulation to broaden the impact of their actions.

A $5 Million Attack Exploiting a Software Vulnerability

In a specific case, a private organization supporting a government sector was targeted by a hacker who exploited an uncorrected software vulnerability. The attacker demanded more than $5 million in ransom, threatening to publish stolen information online. Part of the material then appeared on Telegram and the dark web. The episode underscores how an overlooked software vulnerability can become an access point for systems connected to critical government operations.

The Challenge of Disinformation and Deepfakes

Al Kuwaiti also warned against the growing use of deepfakes and disinformation, defining them as elements of a "fifth-generation war" in which decentralized actors can influence communities without directly attacking infrastructures. He cited a case in which a student was bullied and blackmailed using digitally manipulated images, forcing her to leave school for a year while undergoing rehabilitation.

Why Technical Defenses Are No Longer Sufficient

The experience of the United Arab Emirates demonstrates that cybersecurity goes far beyond defending the traditional network perimeter. Organizations must now also face social engineering, manipulated media, and rapidly spreading disinformation. While security teams can correct software, monitor networks, and block suspicious activity, they cannot completely prevent employees, customers, or the public from encountering convincing false content.

The Crucial Role of Artificial Intelligence and Human Judgment

Artificial intelligence could help authorities identify and respond more quickly to false information, but Al Kuwaiti emphasized that human judgment remains indispensable. He urged media organizations, influencers, and common users to verify information through official and reliable sources. For companies, keeping software updated remains essential, but cybersecurity programs must increasingly consider social engineering, manipulated media, and the possibility that a single compromised account or reckless action could amplify a much larger attack.

The Need for Effective Incident Response

In a context where cyber threats are becoming increasingly sophisticated, organizations must invest in Managed Detection and Response (MDR) and SOC as a Service solutions to ensure a timely response to attacks. Collaboration between government agencies, the private sector, and international organizations is fundamental to containing incidents and limiting the exposure of sensitive information.

How to Protect Critical Infrastructures

To defend critical infrastructures, organizations must adopt a proactive approach to security, implementing penetration test and vulnerability assessment solutions to identify and correct vulnerabilities before they can be exploited. Additionally, it is essential to adopt Data Loss Prevention (DLP) measures to protect sensitive data from unauthorized access and accidental loss.

The Challenge of Regulatory Compliance

In an increasingly complex regulatory context, organizations must ensure compliance with directives such as the NIS2 directive and the DORA regulation, which establish rigorous requirements for digital operational resilience and cyber risk management. The ISO 27001 certification represents a fundamental benchmark to demonstrate commitment to cybersecurity and data protection.

The Future of Cybersecurity in the United Arab Emirates

As the United Arab Emirates continue to develop their cybersecurity capabilities, it is clear that cybersecurity requires an integrated approach that combines advanced technologies, human skills, and international collaboration. Only through collective commitment will it be possible to address emerging challenges and protect critical infrastructures from increasingly sophisticated threats.