UAE's New Cybersecurity Centre of Excellence - and What 20,000+ DDoS Attacks Mean for Your Business

Two things happened in the UAE's cybersecurity world this month that are worth reading together. First, the Cyber Security Council and Dell Technologies announced a new cybersecurity centre of excellence in Abu Dhabi, built around AI, IoT and cloud computing for real-time threat detection. Second, NETSCOUT reported that the UAE absorbed over 20,000 DDoS attacks in just the first half of 2026. One is the UAE building its defenses at a national level. The other is the reason it has to.

What the UAE Just Announced

The new centre, unveiled during Make it in the Emirates 2026, is designed to combine artificial intelligence, IoT and cloud infrastructure into one real-time threat detection capability rather than the siloed, after-the-fact monitoring most organizations still run today. It follows a separate move in September, where the Cyber Security Council worked with Open Innovation AI on a homegrown model built specifically for cybersecurity work — analyzing vulnerabilities, reviewing code and investigating incidents faster than manual review allows.

The direction is consistent with what a recent national report described: a shift toward proactive, anticipatory defense rather than reacting once an incident has already happened. That's a meaningful shift, and it's the right one — but it's happening at the government and critical-infrastructure level. Most private businesses in the UAE are still running the model the UAE is actively moving away from.

The Numbers Behind the Urgency

20,000+ DDoS attacks in six months works out to roughly 110 a day, somewhere in the UAE. That number is climbing for two reasons at once: attackers are increasingly using AI to make attacks faster and more convincing, and the UAE's own rapid digital transformation keeps widening the attack surface every business presents — more cloud services, more connected devices, more customer-facing systems that have to stay online.

A DDoS attack doesn't need to breach anything to hurt you. It just needs to keep your website, booking system or customer portal offline long enough to cost you business and damage trust with the people trying to reach you.

What This Means If You're Not a Government Entity

National infrastructure getting harder to attack doesn't make your business harder to attack — if anything, it can push opportunistic attackers further down the chain toward softer targets. The practical takeaway for most UAE businesses isn't 'build an AI threat detection centre.' It's closing the specific gaps that let a DDoS attack, a basic intrusion attempt or a phishing-led breach succeed in the first place:

• DDoS and web application protection (WAF) in front of anything customer-facing, so a traffic flood or exploit attempt gets filtered before it reaches your servers
• 24/7 monitoring through a Security Operations Center, rather than discovering an incident when a customer or employee reports something wrong
• Network segmentation, so a compromised device or account can't move freely across your entire environment
• A written incident response plan that says who does what in the first hour — not figured out live, during the incident
• Regular vulnerability assessment, since most successful attacks exploit a gap that was findable before anyone used it

Closing the Gap With the Right Partner

This is exactly the gap CODE3 exists to close for businesses across Dubai, Abu Dhabi and Sharjah. Our managed security services and dedicated Security Operations Center (SOC) give you the continuous monitoring a national-level strategy assumes every organization already has, and our Web Application Firewall (WAF) is built specifically to absorb the kind of DDoS and exploit traffic behind that 20,000-attack figure. Both sit under our broader cybersecurity services, scoped to what your business actually runs — not a one-size-fits-all package.

The UAE is visibly raising the bar on cyber defense. Talk to us about getting a quote to make sure your business is raising it too, before the next number in a report like this one is about you.