Image: Supplied
As the region faces a surge in cyber threats, with tens of thousands of attacks targeting critical sectors every month, businesses are rethinking how they protect their data.
In this conversation, Samer Diya, SVP of EMEA Sales at Forcepoint, explains how AI-native security, real-time analytics, and stronger public-private collaboration are reshaping the nation’s cybersecurity landscape.
The UAE has seen over 33,000 cyberattacks in H1 2025 alone, with strategic sectors facing daily threats. How are organisations adapting to this escalating risk environment?
Organisations in the UAE are responding to this surge in cyberattacks by shifting from reactive defences to AI-native, risk-adaptive data security strategies.
Many are adopting intelligent security models that continuously monitor networks, devices, and user behaviour to detect anomalies early—before they escalate into breaches.
At the same time, enterprises are placing greater emphasis on employee awareness training and leveraging automation to detect, prioritise, and respond to emerging threats efficiently.
Another key development is the growing collaboration across public and private sectors, supported by the UAE Cybersecurity Council, to strengthen national resilience. Through shared frameworks and coordinated responses, these partnerships enhance the country’s ability to defend against and mitigate evolving risks.
DDoS incidents in the UAE have surged by 862 per cent over the past five years. What trends are you seeing behind these attacks, and what makes them increasingly sophisticated?
The dramatic surge in DDoS incidents in the UAE is driven by several factors, including the rapid proliferation of unsecured IoT devices, the widespread availability of DDoS-for-hire services, and the increasing use of automation and AI by attackers to adapt tactics in real time.
These attacks no longer rely on brute force alone — instead, they launch sophisticated multi-vector attacks that blend volumetric flooding with protocol and application-layer methods, often enhanced by AI techniques that evade traditional defenses.
This evolution underscores the need for security teams need to move beyond static defences, prioritising real-time monitoring, adaptive threat intelligence, and automated response capabilities to distinguish between legitimate and malicious traffic.
Forcepoint’s data security platform unifies protection across SaaS, email, web, endpoints, and networks. How does AI enhance visibility and control in this fragmented threat landscape?
Security must be as dynamic and intelligent as the technologies transforming our world. As AI reshapes industries, it expands the attack surface—but also empowers security leaders to detect and act on threats faster than ever before.
That’s why our platform is built with AI from the ground-up to power data security that continuously learns, adapts, and responds to evolving risks.
Our AI Mesh technology enables precise, explainable and customisable data discovery and classification, while a single-policy framework ensures consistent prioritisation, remediation, and protection.
Data is safeguarded at rest, in use, and in motion — across all environments and channels. With AI-native security, organisations gain deep visibility into data activity, faster threat response, and automated remediation, closing the critical gap between visibility and control.
With over 200,000 attempted attacks daily targeting critical sectors, what are the top priorities for UAE organisations in strengthening cybersecurity defenses?
In today’s complex cyber landscape, where attackers constantly innovate, UAE organisations must prioritise comprehensive defence strategies to safeguard data effectively:
- Unified, adaptive data security: Partner with vendors offering advanced, AI-native solutions that transform risk visibility into actionable protection, enabling security teams to quickly detect, adapt, and respond to evolving threats.
- Employee education: Invest in ongoing cybersecurity awareness and training programs to reduce human error, which is often the first entry point for attacks.
- Public-private collaboration: Actively participate in regional initiatives like the Dubai Electronic Security Center and UAE Cybersecurity Strategy 2025 to share intelligence, align defenses, and strengthen cyber resilience.
Focusing on these priorities will allow UAE organisations and government agencies to build a more resilient defense posture, one that can withstand today’s sophisticated threats.
How does Forcepoint help organisations navigate evolving regional and global cybersecurity regulations while maintaining operational efficiency?
Compliance requirements are evolving quickly, particularly with the increasing complexity of data governance laws in the UAE and across the GCC.
Forcepoint helps organisations navigate this landscape by embedding real-time, policy-driven compliance tools into daily operations.
With access to nearly 2,000 policy templates, automated reporting and explainable, auditable AI, we are making it easier to keep pace with complex regulations without disrupting business workflows. This ensures that teams can work without disruption, knowing sensitive information is protected wherever it moves, while staying aligned with shifting regulations.
Looking ahead, which emerging threats or vulnerabilities should UAE enterprises and government agencies be most prepared for in the next 12–24 months?
In the next 12–24 months, threats are expected to become more AI-assisted, targeted, and data-focused. Deepfake-enabled social engineering, evasive malware, and data manipulation attacks will likely increase. Cloud misconfigurations and insecure APIs continue to be among the most exploited vulnerabilities.
Supply chain risk is also rising as organisations depend more on third-party SaaS and infrastructure. In the UAE, critical infrastructure sectors, including energy and logistics, are likely to face targeted campaigns.
To prepare, organisations should prioritise AI-native, self-aware data protection strategies, continue strengthening internal training, and foster collaboration across the regional cybersecurity ecosystem to stay resilient and compliant.
