AI reshapes the future of cybersecurity

12 May 2025

 

Register for MEED’s 14-day trial access 

In the fast-evolving space of cyber threats and cybersecurity, artificial intelligence (AI) is emerging as a force multiplier that raises both the scale and seriousness of cyber threats while equally enabling ever-greater sophistication in the tools and solutions used to combat such threats.

In January, the UAE Cyber Security Council reported that cyberattacks targeting strategic sectors in the country had reached a count of more than 200,000 incidents daily, with many of the attacks coming from ‘persistent threat groups’ such as the notorious ‘BlackCat’ cyber gang.

The threats are diverse, targeting everything from credit card transactions to identity verification processes, but the most common threat in 2024 was ‘phishing’ – cyberattacks using exploits in information technology (IT) and communications systems to lure individuals into either divulging sensitive information or accidentally providing a route for malware to enter their IT systems.

AI-powered arms race

Speaking to MEED, Daumantas Grigaravicius, head of Middle East at Netherlands-based payments solutions provider Adyen, explains that the days of crude ‘Nigerian prince’ scams are long gone and that “attackers now use AI to create flawless, personalised phishing emails and fake customer service chats, making scams nearly impossible to spot”.

He highlights how in one serious incident in recent years in the UAE, “a group of fraudsters used deepfake audio and forged emails to impersonate a company director, tricking an employee into approving a $35m transfer for a fake acquisition”.

Today, AI can make such scams appear “shockingly convincing”, and Grigaravicius advises that the best practice for businesses should be to both “verify financial requests via multiple channels and use AI tools to detect fraudulent activity”.

The UAE reported that phishing scams accounted for 61% of the reported cyber security incidents in the country last year, and AI is increasingly being used to support phishing and ransomware attacks through social engineering tools, deepfake media and AI-enhanced malware.

At any given time, AI-powered attack bots are also out there on the internet, “hacking accounts, testing stolen passwords, and scraping personal data at massive scale” to probe for weaknesses.

Emerging AI-powered cyber threats are, in turn, prompting the development of a whole new generation of AI-powered cybersecurity tools to counter them.

Grigaravicius notes how AI-powered fraud detection systems can now flag unusual patterns in real time, while AI-powered security software can “fight fire with fire […] adapting as fast as the attackers do, backed by strong multi-factor authentication to block them at the source”.

The result is an AI-driven arms race that is generating a dizzying array of both threats and solutions, but one that businesses must master if they are to safeguard their digital services and assets.

By upgrading infrastructure, enforcing better security and training more experts, businesses can stay ahead of evolving cyber risks

Addressing infrastructure gaps

While some cybersecurity weaknesses spring from a basic lack of awareness or the nature of the rising threats, other obstacles include institutional barriers, a lack of investment and talent gaps.

In the 2024 Kyndryl Readiness Report, 43% of UAE and Saudi business leaders admitted their IT infrastructure was not future-ready, while the 2025 UAE Cybersecurity Report found that security misconfigurations caused 27% of incidents. Grigaravicius adds that “many companies lack multi-factor authentication, rely on manual processes, and fail to detect threats promptly”.

However, there are positive signs. Grigaravicius notes that UAE businesses are fighting back by retiring legacy systems, introducing zero-trust security models and multi-factor authentication, and “investing more in AI-powered security tools to combat AI-driven fraud”. The UAE government is also “expanding data protection laws and drafting stricter AI governance to close legal gaps”.

Cyber threats are a major concern for governments, with the UAE Cyber Security Council reporting that 30% of attacks in 2024 were directed at government targets. Acknowledging the rise in cyber threats, the UAE’s Telecommunications and Digital Government Regulatory Authority (TDRA) has implemented a dedicated strategy of proactive measures to enhance its cybersecurity framework.

Across the GCC, the sheer diversity of transaction systems and cybersecurity platforms can also be a source of security gaps, with the lack of cross-border integration making “fraud detection and data flow more vulnerable”, notes Grigaravicius.

With each country having its own payment networks, security frameworks and regulations, cross-border protection becomes harder – the fragmentation creating inconsistencies and gaps in the cyber defences that cybercriminals can exploit.

In 2021, the GCC established the Arabian Gulf System for Financial Automated Quick Payment Transfer (Afaq), a Real Time Gross Settlement System (RTGS) system with a view to streamlining the $2tn in cross-border transactions still handled by legacy banking networks in the region.

As of 2024, Bahrain, Kuwait, Oman, Saudi Arabia and the UAE had all implemented the framework, and since 2022, a GCC Cybersecurity Ministerial Committee has regularly convened to align cyber defences and ensure that businesses and governments are sharing real-time cyber threat intelligence.

On top of cyberattacks that exploit human error and weakenesses in existing infrastructure or gaps in regulations, a shortage of cybersecurity talent can also leave organisations vulnerable.

Nurturing cybersecurity talent is therefore a must – and this is a point not lost on GCC governments. The UAE, for instance, has taken productive steps by developing tech-focused visa schemes, cyber academies and AI talent programmes.

The region’s trajectory is more generally positive, adds Grigaravicius, who says that while “AI threats are getting smarter […] so are the region’s defences. By upgrading infrastructure, enforcing better security and training more experts, businesses can stay ahead of evolving cyber risks”.

Ongoing adaptation is a must, however, and in one way or another, all regional organisations and institutions will have to rise to the cyber challenge. As Grigaravicius notes: “AI is here to stay, for better or worse. The key is to stay ahead, stay sceptical and use AI smarter than the criminals do.”

See also: Bridging the first-party data divide

https://image.digitalinsightresearch.in/uploads/NewsArticle/13851391/main.gif
John Bambridge
Related Articles
  • Brent hits $112 a barrel following Saudi oil field attack

    22 October 2026

    Oil prices climbed more than 3% on 22 October after a drone targeting Saudi Aramco’s Shaybah oil field development killed two people and injured two others a day earlier, adding to concerns over energy supplies as attacks on Saudi energy infrastructure intensified.

    Global benchmark Brent crude hit $112.30 in early trading on 22 October, but later pared gains and was trading at $111.52 a barrel as of 11am GST.

    Three residents and a Saudi citizen were killed in two separate incidents in Saudi Arabia’s Eastern Province on 21 October, authorities said, as attacks on the kingdom accelerated following an escalation of hostilities with the Iran-backed Houthi group in neighbouring Yemen.

    Overnight, the Saudi-led coalition fighting the Houthis in Yemen announced that it had intercepted and destroyed four drones in the Eastern Province.

    Saudi air defences intercepted a drone attempting to target a processing facility at Saudi Aramco’s Shaybah oil field development on the morning of 21 October, the Saudi Ministry of Energy said.

    The official Saudi Press Agency (SPA) carried a statement quoting an energy ministry official as saying the attempted attack resulted in the deaths of two residents – a Filipino and a Nepali – and injuries to two others – an Indian and a Pakistani – after debris fell due to the interception.

    Following the interception, a fire broke out in a vehicle belonging to a contractor at the Shaybah oil field, outside the facility’s perimeter, with no impact on operations.

    Dammam airport attack

    Separately, a Houthi attack on King Fahd International airport in Dammam on the evening of 21 October killed an Indian resident and a Saudi citizen.

    Eight people were also injured in the attack, including a Saudi national, a Nepali, and two nationals each from India, Yemen and Bangladesh. Injuries ranged from minor to critical, the Saudi General Authority of Civil Aviation (Gaca) said the next day.

    “The attack also caused property damage, the extent of which is currently being assessed. Further updates will be provided,” Gaca said, adding that operations had since resumed at Dammam airport.

    Saudi Arabia has come under sustained attack from the Iran-aligned Houthi rebel group in October, including strikes on Riyadh’s international airport in what authorities described as the kingdom’s deadliest incidents in years, as the war with the group escalates.

    The Houthi militias also struck an administrative building at Aramco’s headquarters in Dhahran, in the Eastern Province, on 13 October, resulting in a limited fire.

    The Houthi rebels opened a new front in the regional war between Iran and the US in mid-July, when they breached a four-year truce with Saudi Arabia in Yemen’s civil war, which began in 2014, and started attacking Saudi vessels and Aramco energy assets along the Red Sea, including repeated strikes on the Jizan refinery.

    The 1,200-kilometre East-West pipeline operated by Aramco was also hit by Houthi missiles in September, and once directly by Iran in April.

    The East-West pipeline transports crude from Saudi Arabia’s Eastern Province oil fields to the Red Sea port city of Yanbu on the kingdom’s west coast. It has a pumping capacity of 7 million barrels a day.

    Saudi Arabia relies heavily on the East-West pipeline to bypass the volatile Strait of Hormuz maritime chokepoint and ship crude from its Red Sea coast. Riyadh has increasingly used the line to route exports away from Hormuz since the US-Iran conflict began on 28 February – a tactical advantage most of its Gulf neighbours lack.

    Aramco resumed crude exports via the pipeline at the start of October.

    https://image.digitalinsightresearch.in/uploads/NewsArticle/20841984/main.jpg
    Indrajit Sen
  • Dewa International signs energy and infrastructure MoUs

    22 October 2026

    Dubai Electricity & Water Authority’s (Dewa) new development arm, Dewa International, has signed four memorandums of understanding (MoUs) with international partners to explore investment and project development opportunities in the energy, water and infrastructure sectors.

    The agreements, signed during Dubai’s Water, Energy, Technology and Environment Exhibition (Wetex 2026), follow the launch of the wholly owned subsidiary in June, as reported by MEED.

    At the time, the utility said the arm would be used to export Dubai’s energy and water infrastructure model, with a focus on developing conventional and clean energy projects for global markets.

    At Wetex, Dewa International signed an MoU with France’s EDF Power Solutions to explore potential joint participation in solar, wind, battery energy storage and pumped-storage hydropower projects.

    A separate agreement with China Energy International Group explores the company’s potential role as an engineering, procurement and construction (EPC) partner for major energy, water and infrastructure projects. The MoU also covers cooperation in project development and EPC services.

    A further agreement with UK-based Capital Dynamics focuses on potential joint investments in operational clean energy assets in Europe. The parties will also explore establishing an investment vehicle for future clean energy infrastructure investments.

    Dewa International also signed a fourth agreement with Mumbai-Headquartered Tata Consultancy Services, exploring the company’s potential role as a technical consultancy partner. The scope covers technology strategy, information technology and operational technology integration, and asset performance management solutions.

    Dewa currently has almost $7bn-worth of power and water projects under execution across the UAE, according to regional projects tracker MEED Projects.

    Its flagship Mohammed Bin Rashid Al-Maktoum Solar Park is the largest single-site solar park in the world. The utility is currently advancing the project’s seventh phase, with Abu Dhabi Future Energy Company (Masdar) recently submitting the lowest bid for the project, as exclusively reported by MEED.

    https://image.digitalinsightresearch.in/uploads/NewsArticle/20828111/main0128.jpg
    Mark Dowdall
  • QatarEnergy and TotalEnergies to develop Lebanon solar plant

    22 October 2026

    Register for MEED’s 14-day trial access 

    State-owned QatarEnergy and France’s TotalEnergies have agreed to jointly develop a solar power plant in Lebanon.

    The agreement was announced on 16 October during the Qatari prime minister’s official visit to Beirut, where he held a joint press conference with Lebanese Prime Minister Nawaf Salam.

    According to a statement published by the Lebanese Prime Minister's Office, the plant will be an initial project under a broader framework for energy cooperation between Qatar and Lebanon. Its capacity, location, investment value and implementation schedule have yet to be disclosed.

    Qatar’s Prime Minister Sheikh Mohammed Bin Abdulrahman Bin Jassim Al-Thani said: “The aim is to develop a major investment project that benefits the Lebanese economy, as well as the Qatari companies and entities participating in it.”

    Separately, Salam said the Lebanese and Qatari governments were “close to reaching an agreement” to rehabilitate, develop and modernise Lebanon’s electricity-generation infrastructure.

    The proposed project would cover the country’s various electricity-generation sources and associated infrastructure, aiming to improve the reliability of electricity supplies and reduce costs.

    The project would use a build, operate and transfer model, under which Qatari entities would finance, implement and operate the facilities without upfront investment costs for the Lebanese treasury, Salam said.

    Salam also said the proposal was being prepared with support from the International Finance Corporation, and that he hoped to present it to the Lebanese government soon.

    The wider initiative is intended to address Lebanon’s longstanding electricity-generation shortfall and overcome financing constraints that have delayed infrastructure projects in the sector.

    As MEED previously reported, the Lebanese government continues to advance broader reforms to the country’s electricity sector.

    In August, Lebanon’s Electricity Regulatory Authority invited private sector companies to submit expressions of interest (EoIs) for several upcoming power-generation projects.

    The EoIs cover up to five grid-connected solar photovoltaic projects with a combined installed capacity of 350 megawatts-peak. The projects are also expected to include battery energy storage systems with a combined capacity of 1,000 megawatt-hours. 

    The regulator is also seeking proposals for distributed dual-fired thermal power plants with net capacities of 20MW-100MW.


    READ THE OCTOBER 2026 MEED BUSINESS REVIEW – click here to view PDF

    Industry and logistics drive development at Neom; Saudi Arabia’s investment priorities realign amid conflict; MEED’s 2026 power developer ranking.

    Distributed to senior decision-makers in the region and around the world, the October 2026 edition of MEED Business Review includes:

    To see previous issues of MEED Business Review, please click here
    https://image.digitalinsightresearch.in/uploads/NewsArticle/20827458/main.jpg
    Mark Dowdall
  • Building resilience into infrastructure delivery

    21 October 2026

     

    The regional disruptions earlier this year tested Gulf supply chains, challenging the movement of goods and construction materials and raising questions about the ability of infrastructure programmes to maintain momentum.

    For the UAE Ministry of Energy & Infrastructure, the experience reinforced the importance of the systems that support project delivery, from transport networks and customs procedures to domestic manufacturers and international suppliers.

    “The disruption reinforced an important principle: infrastructure resilience is ultimately about the ability of the national system to continue operating under pressure,” says Mohammed Al-Mansoori, undersecretary for infrastructure and transport affairs.

    Supply resilience

    The ministry worked with ports, customs authorities, transport and rail operators, contractors, suppliers and the private sector to maintain the flow of essential goods and construction materials. It monitored critical materials and project schedules, identified alternative sources and adjusted procurement and delivery arrangements.

    The response included movement exemptions and facilitation measures for more than 6,600 lorries, while rail freight operations increased from approximately one journey a week to as many as seven journeys a day. Priority and green corridors were activated, customs procedures facilitated and critical shipments prioritised at ports.

    According to Al-Mansoori, these measures contributed to an estimated 25% reduction in transport costs, a 40% improvement in customs clearance times and an increase of approximately 15% in port capacity during the response period.

    For infrastructure projects, the ministry worked with local manufacturers and suppliers to identify alternative sources of road and construction materials meeting the required technical specifications and quality standards. This helped reduce reliance on disrupted international supply routes and support ongoing projects.

    The experience also highlighted the value of existing coordination mechanisms and partnerships.

    “It also reinforced a fundamental principle: resilience means ensuring that critical infrastructure delivery does not depend on a single supplier, a single route or a single mode of transport,” Al-Mansoori says.

    The ministry is planning to build on this experience by diversifying suppliers, strengthening domestic manufacturing and improving supply-chain monitoring.

    Resilience is increasingly being incorporated into procurement planning. For critical materials and services, the ministry aims to identify risks early, broaden the pool of qualified suppliers and ensure viable alternatives are available.

    The approach supports the UAE’s wider industrial objectives, including the national in-country value programme, which seeks to direct a greater share of procurement expenditure into the national economy.

    “Our objective is not simply to purchase more locally. It is to help create competitive national supply chains,” Al-Mansoori says.

    Domestic suppliers must be able to meet the technical requirements, quality standards and volumes demanded by major infrastructure programmes. Localisation is therefore about developing competitive industrial capabilities while shortening supply chains, improving responsiveness and encouraging investment.

    “Localisation is not simply a procurement choice; it is an investment in national capability and long-term resilience,” Al-Mansoori says.

    The ministry is also working with contractors to manage pressures from fluctuating material, insurance and transport costs. Its approach combines commercial discipline with early engagement to prevent external pressures from affecting project delivery.

    “Our approach is based on early engagement, transparency and disciplined commercial management,” Al-Mansoori says. “Long-term infrastructure delivery depends on strong contractors as much as it depends on strong contracts.”

    Contractors remain responsible for normal market and contractual risks, but the ministry seeks to assess exceptional pressures objectively, supported by evidence of their impact on costs and schedules. Realistic planning, early procurement and proactive risk management also help maintain momentum.

    “The objective is to strike the right balance between protecting the government’s commercial interests and securing best value for money, while maintaining an efficient, sustainable contracting market capable of continuing to deliver strategic infrastructure projects,” Al-Mansoori says.

    Resilience means ensuring that critical infrastructure delivery does not depend on a single supplier, a single route or a single mode of transport

    Project delivery

    The ministry’s focus on measurable outcomes is reflected in the Emirates Road enhancement project, which involves widening approximately 25 kilometres of Emirates Road from three to five lanes in each direction, alongside major improvements to Interchange No. 7.

    The works are expected to increase road capacity by up to 65% and reduce journey times by up to 45%.

    The project illustrates the ministry’s emphasis on assessing infrastructure by the benefits it delivers, rather than simply the scale of construction.

    “Infrastructure success should be measured by the value it creates – not just by the kilometres we build,” Al-Mansoori says.

    That principle is increasingly important as the UAE balances new construction with the long-term costs of operating and maintaining its assets. Decisions made during planning and construction can influence maintenance requirements, operating costs and performance for decades.

    For Al-Mansoori, resilience, domestic capability and effective delivery are closely connected. Stronger local supply chains can reduce exposure to external shocks, while closer engagement with contractors can help projects withstand cost pressures. 


    Don’t miss MEED’s MENA Construction Summit 2026, taking place under the patronage of the UAE Ministry of Energy & Infrastructure
     Secure your place as an attendee or request the sponsorship deck by clicking here or emailing us at meedevents@meed.com


     

    https://image.digitalinsightresearch.in/uploads/NewsArticle/20810056/main.gif
    MEED Editorial
  • Riyadh tenders Expo 2030 Adaptation and Innovation Pavilion

    21 October 2026

     

    Register for MEED’s 14-day trial access 

    Expo 2030 Riyadh has tendered the design-and-build main contract for the Adaptation and Innovation Pavilion in the exhibition’s Technology District.

    The pavilion will be built on a plot of at least 12,710 square metres and will feature a two-level basement, ground-level public areas, an elevated skywalk, visitor experience areas, food and beverage outlets, retail space, VIP facilities, offices, back-of-house areas, exhibition spaces, an amphitheatre and a resonance hall.

    The facility is being designed to accommodate a minimum of 20,000 visitors a day at peak periods, with an anticipated average of about 15,000 visitors a day. The project targets LEED Gold certification.

    The tender was issued on 1 October, with bids due on 6 January 2027.

    The design-and-build contractor will be responsible for completing, reviewing, verifying, coordinating and technically integrating the design, including specialist contractor design portions and coordination with the novated lead design consultant.

    The scope includes completing early works and substructure activities, including grading, bulk earthworks, excavation, cut and fill, soil improvement, raft foundations, reinforced-concrete basement walls, basement columns through to the ground-floor slab, waterproofing, mechanical, electrical and plumbing (MEP) provisions, and backfilling.

    The contractor will also deliver the superstructure and building envelope, including structural works, facade engineering and installation, roofs, waterproofing, external finishes, and permanent facade access and maintenance systems. The internal works will cover front-of-house and back-of-house areas, public and core spaces, internal finishes, fixtures, fixed fittings, joinery, circulation areas, lobbies, stairs, toilets, storage, waste areas and associated builder’s works.

    The building services package includes MEP systems, information and communications technology, extra-low-voltage systems, building management systems, security, fire and life safety systems, specialist lighting and vertical transportation.

    The contract also covers the visitor experience package, including procurement, installation, integration, testing, commissioning and handover of visitor-facing environments, media, immersive and audiovisual technologies, interactive elements, experiential lighting, digital content, interpretive and wayfinding systems, controls and supporting infrastructure.

    Within-plot infrastructure and utilities, landscaping, public realm works, paving, planting, irrigation, signage, street furniture, drainage, stormwater systems, external lighting, security, and fire and life safety systems are also included.

    The contractor will be responsible for procurement, off-site fabrication, construction, testing and commissioning, performance verification, training, operations and maintenance documentation, operational readiness, handover, defects rectification and close-out.

    The main works tender is based on a 60% RIBA Stage 3 design, with the Stage 3 design to be completed to 100% through an addendum.

    Early works and substructure works, as well as the lead design consultant, will be novated to the contractor. Visitor experience works are included as a provisional sum.

    https://image.digitalinsightresearch.in/uploads/NewsArticle/20801465/main.jpeg
    Yasir Iqbal