UAE thwarts sophisticated cyberattacks on aviation, energy and education sectors
National cybersecurity systems successfully detected and contained organized attacks targeting critical infrastructure, preventing disruption to essential services across multiple sectors.
UAE thwarts sophisticated cyberattacks on aviation, energy and education sectors
The UAE has successfully thwarted a series of sophisticated and organized cyberattacks targeting vital sectors including aviation, energy and education, the UAE Cybersecurity Council announced on Monday.
National cybersecurity systems detected the threats and responded immediately, containing attempted breaches before attackers could achieve their objectives. The swift response prevented any disruption to the continuity of critical systems and essential services.
The UAE Cybersecurity Council, established in November 2020 to develop comprehensive cybersecurity strategy and infrastructure, described the attacks as sophisticated operations targeting key sectors whose operations are crucial to the country's infrastructure and services.
Sustained threat environment
The announcement comes amid an intensifying threat landscape. Between January and June 2026, UAE organizations experienced an average of 2,197 cyberattacks per organization every week, according to data from Check Point Software Technologies. This sustained pressure underscores the importance of robust defensive capabilities.
The attacks represent part of an ongoing pattern. In February 2026, the UAE Cybersecurity Council foiled similar cyberattacks targeting vital sectors using ransomware, which encrypts data and demands payment for decryption.
Aviation sector under pressure
The targeting of aviation infrastructure reflects a global trend. Cyberattacks on the aviation industry surged 600 percent in 2025 compared with 2024, according to research from Thales. This follows a 131 percent increase between 2022 and 2023, according to Eurocontrol's 2024 Cyber Security Report.
The aviation sector's vulnerability was demonstrated in September 2025 when a ransomware attack on Collins Aerospace's Multi-User System Environment software disrupted passenger check-in and baggage systems at major European airports including Heathrow, Brussels and Berlin.
Strategic defense framework
National cybersecurity teams identified and countered the threats through the UAE's monitoring and response systems, which operate under the National Cyber Security Strategy (2025-2031). The strategy shifts the country's focus from capacity building to active defense and is structured around five pillars including protecting critical infrastructure.
The Middle East has been identified as a top target for cyberattacks on energy infrastructure, with the region's energy sector facing particular focus from threat actors. The financial stakes are substantial, with the average cost of a cyber incident for UAE businesses reaching $2.9 million.
The UAE Cybersecurity Council stressed the importance of maintaining vigilance against evolving cyber threats and strengthening protection of critical infrastructure and digital systems as the country continues to bolster its cybersecurity capabilities against increasingly sophisticated digital threats.
