A recent report from Positive Technologies reveals that the United Arab Emirates and Saudi Arabia were the primary targets for cyber threats in the Gulf region during the first half of 2026, collectively absorbing 50% of all recorded incidents. The UAE topped the list, facing 35% of the total attacks, while Saudi Arabia accounted for 15%. Researchers noted a dramatic surge in malicious activity during the first quarter, largely driven by regional geopolitical tensions that fueled state-sponsored efforts to compromise government and state-run institutions.

The sectors most vulnerable to these breaches included government agencies, which faced 27% of all attacks, followed by industrial organizations and general enterprise targets. Threat actors primarily relied on three tactics: exploiting software and hardware vulnerabilities, deploying AI-enhanced malware, and executing sophisticated phishing campaigns across email and messaging platforms. The report highlights that vulnerability exploitation remains the most common entry point, likely due to a regional dependence on aging SCADA systems that are relatively easier for attackers to manipulate.