The UAE says it absorbs 800,000 hacking attempts a day. Nobody has seen the method
Rest of World’s 24 August report on Abu Dhabi’s AI-versus-AI cyber posture is new. The figure at its centre has been circulating since May, with no published definition of what counts as an attempt.
The claims all originate with the UAE Cyber Security Council. Hacking attempts on the country reached approximately 800,000 per day from February 2026 — described as four times the prewar level. On 10 August the Council said it had detected and contained coordinated attacks on the aviation, energy and education sectors since February, when fighting began between Iran, Israel and the United States. The federal cyber agency has reported three waves of AI-assisted attacks this year, with attackers using AI to write phishing emails, hunt for software flaws and build malicious programs at speed. The institutional answer is the UAE Cyber Factory, launched on 12 May with CPX Holding, the national strategic cybersecurity partner, at the Make it in the Emirates exhibition in Abu Dhabi, and framed around building tools domestically rather than buying them abroad. “The UAE Cyber Factory brings together local talent, advanced engineering, and innovation built in the UAE,” CPX chief executive Hadi Anwar said at the launch. Dr Mohamed Al Kuwaiti, head of cyber security for the UAE government, called it “a new phase of leadership, positioning the UAE as a global hub for advanced cybersecurity.”
Assessment: Take the sovereignty programme seriously and the statistic with tongs. The 800,000 figure is a government self-report with no published methodology, no definition of an “attempt” — a blocked port scan and a successful intrusion are not the same event — and no independent verification in three months of circulation. The “four times prewar” multiplier rests on a baseline that has never been shown. What is new here is not the number but its journey: a launch-day talking point from May being re-reported in August as a war-period measurement. That is how unaudited state statistics acquire the texture of fact. The Cyber Factory is the part worth watching, because procurement decisions leave a paper trail that daily attack counts do not.