
A new analysis from cyber threat research firm Positive Technologies warns that cybercrime across the Middle East is poised to rise significantly in both scale and complexity. This comes as many regional governments continue to digitise critical infrastructure and public services. However, alongside this digital push, increasing geopolitical tensions have made the region more vulnerable to cyberattacks.
One of the most commonly used tactics identified is social engineering where attackers manipulate individuals into revealing personal or sensitive information. The report highlights that such tactics have led to a high number of successful cyberattacks across countries like Saudi Arabia, the UAE, Israel, and Qatar. Moreover, malware, denial-of-service (DDoS) attacks, and exploitation of existing cybersecurity gaps remain widespread methods.
According to the researchers, the report likely underestimates the full extent of the threat. Many incidents go unreported due to the reputational risks faced by organisations and governments. This underreporting means that even specialists in cyber incident analysis struggle to quantify the true scale of regional threats.
Dark Web Exposure and Infrastructure Targeting
In addition to conventional attacks, the dark web has emerged as a serious concern. Threat actors use it to sell stolen data and discuss vulnerabilities particularly those involving countries leading in digital transformation. Notably, the UAE, Israel, Qatar, and Saudi Arabia appear most frequently in dark web discussions, indicating their heightened exposure.
Between 2024 and early 2025, government institutions were among the most targeted, followed closely by manufacturing facilities, individuals, and military organisations. Cybercrime groups appear especially focused on penetrating critical infrastructure and public systems. These attacks are no longer limited to espionage or theft but now threaten broader national interests.
Furthermore, the report highlights how advancements in artificial intelligence and high-performance computing have lowered the barrier to entry for aspiring cybercriminals. With easier access to powerful tools, the likelihood of attacks continues to grow.
National Security and Regional Response
The report urges governments to intensify their focus on defending critical assets. Failure to act decisively, it warns, could compromise national security and state sovereignty. Countries like the UAE are already taking steps in this direction. For instance, the UAE recently announced a new Cyber Security Centre of Excellence, developed in partnership with Google.
This initiative is expected to create over 20,000 jobs and attract up to $1.4 billion in foreign investment by 2030. Mohamed Al Kuwaiti, head of the UAE’s Cybersecurity Council, has stressed the country’s ambition not only to protect itself but also to become a net exporter of cybersecurity talent.
As the region accelerates its digital ambitions, experts warn that security measures must evolve just as quickly. Without robust defences, the risks to infrastructure, economies, and citizens will only continue to multiply.