Microsoft report ranks UAE sixth most targeted country for cyber attacks
Microsoft's 2026 Digital Defence Report puts the UAE sixth globally for customers affected by cyber activity in the first half of 2026. Microsoft also announced plans with the UAE Cyber Security Council and Core42 to deploy its AI security tool MDASH across government entities.
1 / 2
The story, neutrally told
Centre · 2Microsoft's 2026 Digital Defence Report ranks the UAE sixth globally among countries where customers were most frequently affected by cyber activity in the first half of 2026. Gulf NewsN “In the first half of 2026, Microsoft data showed the UAE ranked sixth globally among countries where customers were most frequently impacted by cyber activity” Read at Gulf News ↗ The NationalN “The UAE is ranked sixth internationally as a target of cyber attacks in an analysis by” Read at The National ↗ Centre · 2According to The National, the US topped the ranking, followed by Israel, Ukraine, Taiwan, the UK and the UAE, with India, Japan, Canada, Germany, Australia and the Philippines completing the top 12. Gulf News adds that the UAE ranked second among countries in the Middle East and Africa. The NationalN “India, Japan, Canada, Germany, Australia and the Philippines completed the top 12.” Read at The National ↗ Gulf NewsN “and second among countries in the Middle East and Africa” Read at Gulf News ↗ Centre · 1The report, released as Cyber Security month began, identifies three shifts: AI is accelerating both attacks and defence; identity remains the main way attackers gain access; and incidents increasingly have consequences beyond the original victim. Microsoft says it draws on more than 165 trillion security signals a day. Gulf NewsN “the report identifies three shifts defining cybersecurity in 2026: AI is accelerating both attacks and defence; identity remains the primary way attackers gain access to organisations; and cyber incidents are increasingly creating consequences beyond the original victim”“more than 165 trillion security signals each day” Read at Gulf News ↗
Centre · 1The report recommends that organisations protect identities, respond faster and build resilience, including stronger authentication, less reliance on passwords, faster detection and response, regular exercises of incident-response plans, and systems designed to keep critical operations running through disruption. Gulf NewsN “The report recommends that organisations focus on three priorities: protecting identities, responding faster and building resilience.” Read at Gulf News ↗ Centre · 2Microsoft, the UAE Cyber Security Council and Core42 announced plans to deploy MDASH, Microsoft's AI-powered cybersecurity capability, across UAE government entities, to help prioritise risk and respond to emerging threats with greater speed and scale. The NationalN “Microsoft, the UAE Cyber Security Council and Core42 announced plans to deploy MDASH, Microsoft’s AI-powered cybersecurity capability, across UAE government entities” Read at The National ↗ Gulf NewsN “respond to emerging threats with greater speed and scale” Read at Gulf News ↗ Centre · 2Yazan Khasawneh, director of cybersecurity at Microsoft UAE, said the UAE is entering a phase in which AI is becoming part of the operating model of government and business, so security must be designed in from the outset. Gulf NewsN “The UAE is entering a phase in which AI is becoming part of the operating model of government and business.” Read at Gulf News ↗ The NationalN “designed into the way organisations adopt AI, manage identities, protect data and maintain continuity from the outset” Read at The National ↗
Centre · 1The National reports that the UAE was the third-most targeted country by Iran-linked hackers, behind the US and Israel. It says Iran's internet blackout, which lasted until May, caused a slight dip in Tehran-sponsored attacks, but Microsoft warned they had resumed. The NationalN “The UAE was the third-most targeted country by hackers connected to”“Microsoft warned that those attempts had since resumed.” Read at The National ↗ Centre · 1Microsoft said Iranian state-aligned actors rely mainly on known vulnerabilities, weak authentication and exposed internet-facing systems, with credential harvesting and phishing as central enablers. The NationalN “Iranian state-aligned threat actors continue to rely primarily on exploitation of known vulnerabilities, weak authentication and exposed internet-facing systems for initial access” Read at The National ↗ Centre · 1The National adds that UAE cybersecurity chief Mohamed Al Kuwaiti said last month the country faced a barrage of daily threats, with Iran's Islamic Revolutionary Guard Corps behind many, and that in August the UAE Cyber Security Council said it had contained organised attacks on the aviation, energy and education sectors before they disrupted vital systems. The NationalN “with Iran's Islamic Revolutionary Guard Corps behind many attacks”“detected and contained advanced, organised attacks against the aviation, energy and education sectors before they could disrupt vital systems” Read at The National ↗
Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.
Left0 outlets
No left outlet in our sources has covered this story yet.
Centre2 outlets
- Framing
- Both Middle East centre outlets present the ranking as relevant to the UAE's AI expansion and stress Microsoft's partnership with UAE authorities. The National leads on the ranking and Iran-linked threats; Gulf News (copy credited to WAM) leads on the report's themes of AI and identity.
- Emphasis
- The National: Iran-linked hackers and UAE officials' statements. Gulf News: the report's three shifts, recommendations and the MDASH deployment.
- Leaves out or plays down
- Gulf News omits the full top-12 list and the Iran-specific findings. The National omits the report's recommendations and the 165 trillion signals figure. Neither gives independent or critical assessment of the ranking's methodology.
- Charged language
- “barrage of daily online threats”“nefarious activities”
- For example
-
“Iran's self-imposed internet blackout that lasted until May caused a slight dip in Tehran-sponsored cyber attacks” — The National
“The findings carry particular relevance for the UAE as the country continues to scale AI adoption across government and industry.” — Gulf News
Right0 outlets
No right outlet in our sources has covered this story yet.
What every side reports
- Microsoft's 2026 Digital Defence Report ranks the UAE sixth globally for cyber activity affecting customers in the first half of 2026.
- Microsoft, the UAE Cyber Security Council and Core42 plan to deploy MDASH across UAE government entities.
- Yazan Khasawneh of Microsoft UAE said cybersecurity must be designed into AI adoption from the outset.
Microsoft organisation
Presents the report as showing threats moving faster and more interconnected, and the MDASH partnership as helping the UAE respond.
“threats are moving faster and becoming more interconnected” — Gulf News
“prioritise risk and respond to emerging threats with greater speed and scale” — The National
United Arab Emirates place
UAE officials say the country faces daily threats, with Iran's IRGC behind many, but that it uses advanced technology to detect, defend and disrupt attacks.
“detect, to defend, to disrupt” — The National
Left0 articles
No coverage yet.
Centre2 articles
-
UAE among top 12 targets for cyber threats, says Microsoft
Neutral Reports the ranking, Iran-linked threats and official UAE statements, largely relaying Microsoft's account.
-
UAE faces growing cyber risks as AI transforms attacks and defence
Neutral Wire-style WAM copy that relays Microsoft's report and statement, focused on AI, identity and the MDASH partnership.
Right0 articles
No coverage yet.
- 2 Oct 17:41 First The NationalN UAE among top 12 targets for cyber threats, says Microsoft
- 2 Oct 19:51 +2h 10m Gulf NewsN UAE faces growing cyber risks as AI transforms attacks and defence
Times are when each article was published, or when we first saw it if the outlet gave no time.