UAE Stops Coordinated Cyber Attacks Targeting Critical Sectors

Cyber security teams intercepted sophisticated attempts to infiltrate aviation, energy and education systems before services or data were compromised.

The United Arab Emirates has disrupted a series of organised cyber attacks targeting the country’s aviation, energy and education sectors, according to the UAE Cyber Security Council.

Authorities said the advanced attacks were detected and contained before the perpetrators could compromise government or organisational systems, disrupt essential services or gain access to sensitive information.

The coordinated activity reportedly included attempts to penetrate digital infrastructure, take control of operational accounts and obtain protected data. Attackers also launched targeted phishing campaigns designed to manipulate individual users and use compromised accounts as gateways into larger networks.

Cyber security teams identified the malicious activity at an early stage, allowing them to trace the attacks, block the attempted intrusions and implement measures intended to prevent the threats from spreading across connected systems.

The council said the response demonstrated the importance of proactive monitoring, rapid threat detection and coordinated action when protecting sectors responsible for essential public and economic services.

Aviation and energy networks are particularly attractive targets for cyber criminals and state-linked threat groups because disruption can have significant operational, financial and national security consequences. Education providers can also hold large volumes of personal information, research data and user credentials that may be valuable to attackers.

The latest announcement follows the UAE’s recent interception of sophisticated attacks aimed at the financial sector. Those attempts were also contained without reported disruption to banking or financial services.

The incidents come as the country continues to expand its national cyber security capabilities and invest in systems designed to anticipate emerging digital threats.

In May, the UAE launched the UAE Cyber Factory, a national initiative established by the Cyber Security Council in partnership with cyber security company CPX Holding.

The programme is intended to develop a new generation of defensive technologies, training programmes and operational capabilities. Its work will include the use of artificial intelligence to detect suspicious behaviour, identify vulnerabilities and help security teams respond to attacks more quickly.

Dr Mohamed Al Kuwaiti, the UAE Government’s head of cyber security, said the initiative would support the country’s ambition to become an international centre for advanced cyber security development.

He said the UAE’s approach extended beyond protecting existing infrastructure, with the country also seeking to create technologies capable of identifying, preventing and deterring future threats.

The successful response to the latest attacks highlights the growing pressure on governments and organisations to protect employees as well as technical infrastructure. Phishing campaigns continue to rely on human interaction, often using convincing emails, messages or login pages to persuade users to disclose passwords or open malicious files.

By targeting individuals with legitimate access, attackers can potentially bypass some traditional perimeter defences and move through internal networks without immediately attracting attention.

The Cyber Security Council’s statement did not identify the suspected attackers or disclose whether the incidents were connected. It also did not provide details about the techniques, malware or vulnerabilities used during the attempted intrusions.

However, authorities said the attacks had been neutralised before they could affect the targeted systems, with additional measures introduced to strengthen protections and limit the risk of further activity.