Region must urgently invest in cybersecurity capabilities

Five years since the Pegasus spyware attacks astonished states across the Middle East and North Africa, cybercrime continues to pose a threat to the region. Just last month, Morocco’s national social security agency faced a data breach and Iran averted a “major and sophisticated cyberattack” on critical national infrastructure. Amid the geopolitical volatility in the region today, such attacks further threaten internal stability.

Significantly, almost 17 percent of all global hacktivist incidents occur in the Middle East and Africa. In 2024, 27.5 percent of the incidents of hacktivism and security breaches in the region were linked to state-backed espionage.

In early April, the Moroccan social security agency announced the theft of sensitive data from its platform, including details of the income, benefits and pensions of employees in the Moroccan private sector. Salaries of high-profile figures in business and politics were also accessed. This information was then leaked on Telegram. Later in the month, the Iranian authorities announced the thwarting of a major cyberattack. Iran previously faced similar attacks on its national fuel system in 2021 and a steel mill in 2022.

In an era defined by artificial intelligence and advanced digital technologies, such cyberattacks highlight the dark side of the technological revolution. As the region goes online and relies on digital databases, information security will continue to be a challenge. This region is particularly vulnerable to such sabotage given the long-standing political rivalries that perpetuate regional instability. State and nonstate actors alike are increasingly using cyberwarfare in response to these tensions.

Thus, cybersecurity is a strategic imperative for the region as it grapples with increasing sophistication in attacks. These not only lead to data breaches but can also disrupt power and energy supplies or transport and communication systems. If this trend continues, the consequent erosion of public trust will create an additional challenge for states in the region.

In an era defined by AI and advanced digital technologies, cyberattacks highlight the dark side of the technological revolution. 

Zaid M. Belbagi

While cyberwarfare has been hailed as the future of defense, it is also the future of national security threats. The evolution of hacking capabilities and spyware has made it easier than ever to access sensitive information remotely, with minimum costs and the possibility to deny responsibility. At a time when the region is turning toward fintech, AI and digitization, addressing this challenge is critical.

These cybercrime incidents come in a context where the region’s digital transformation has outpaced its cyber defense capabilities. Outdated systems and a shortage of cybersecurity professionals remain prevalent, making the region vulnerable to this new form of warfare. Moving forward, the region must invest in cyber education and training locally, while also attracting global talent. Indeed, investing in this field will generate new employment opportunities in the region.

To counter these threats, Middle East and North African states must prioritize robust cybersecurity frameworks, agencies and regulations. According to the Global Cybersecurity Index, Morocco, Saudi Arabia, the UAE, Jordan and Oman rank top among the Arab countries strategically advancing in cybersecurity. Morocco’s National Cybersecurity Strategy, Saudi Arabia’s National Cybersecurity Authority and the UAE’s Cybersecurity Council are some promising examples.

Regional cooperation is also critical for mitigating this risk. Independent efforts will significantly benefit from consolidation at the regional level to encourage dialogue and share best practices. As the challenge of cyber threats to the security of energy, food and digital infrastructure is shared across the region, the solution must also be designed collectively. The 2023-27 Arab Cybersecurity Strategy offers hope for regional cooperation in this field.

• Zaid M. Belbagi is a political commentator and an adviser to private clients between London and the Gulf Cooperation Council. X: @Moulay_Zaid