A cyberattack halts a UAE port, airport or energy site for a day
The test Between 26 Oct 2026 and 25 Oct 2027, a cyberattack halts operations at a UAE seaport, a UAE commercial airport, or a UAE oil, gas or power operation for at least 24 hours, as confirmed by a UAE official source or two independent reports.
Not under way · Confidence: medium · Reviewed 25 Oct 2026 · Scores from 1 to 10
This page answers: What could happen, how it is scored, and who is exposed?
Using this page
- Read the two scores: Likelihood and Impact are kept apart.
- Check what is happening, each fact with its source.
- Use the calendar for the dates to watch.
Follow this riskSign in to follow; one weekly email if you ask for it.
Impact is the average of the four parts, rounded, plus one point when Canada is directly hit on two or more channels, up to 10.
Two separate scales from 1 to 10. Strature never multiplies or merges them.
What changed
Dated, newest first
- Strature forecast F-0074: 61% (21 Aug 2026), resolves 20 Nov 2026 [8]
- Council: nearly 750,000 attempts in recent months, mostly energy and education; rise does not necessarily mean successful breaches [4]
- Al Kuwaiti: about 640,000 attacks on 15 Sep; IRGC behind many; attempts lower than early in the war; attacks on financial firms in July [3]
Why it matters
Hacking attempts on the UAE run in the hundreds of thousands a day since the Iran war began on 28 February 2026, and the UAE Cyber Security Council's head named Iran's Revolutionary Guard as behind many. The Council says it contained the campaigns it announced in February, August and October, on aviation, energy and education, before they affected vital services; it also reported attacks on financial firms in July. No UAE official source or two independent reports confirm a cyberattack that shut a UAE port, airport or energy site; one outlet listed unnamed port outages in April without detail. A day's halt at a hub like Dubai International, with 95.2 million passengers in 2025, would be felt across Gulf travel and trade.
Why Likelihood 3 Pushes: attempts at several times the pre-war rate; a possible renewed strike on Iran; ransomware and wiping already tried. Brakes: the campaigns announced in February, August and October contained; volume down from the spring peak; a state-led defence programme.
Why Impact 3 Threshold case: one hub stops for 24 hours.
The other facts on file (8)
- Council: organised cyber attacks of a terrorist nature thwarted (intrusion, ransomware, phishing); no disruption reported [1] (22 Feb 2026)
- Council: coordinated attacks on aviation, energy and education detected and contained before affecting vital systems [2] (10 Aug 2026)
- About 800,000 attempts a day in April against up to 200,000 before the war; Check Point traced camera break-ins to Iranian hackers from 28 Feb 2026 [5] (24 Aug 2026)
- Handala claimed attacks on Dubai Courts, Dubai Land Department and RTA; unverified; no authority response [6] (13 Apr 2026)
- Dubai International: 95.2 million passengers and 454,800 flights in 2025 [7] (11 Feb 2026)
- BlackBerry and the UAE Cyber Security Council cyber partnership announced [9] (21 Nov 2025)
- About 60,000 Canadians live in the UAE [10] (8 Jun 2026)
- WION: nearly 600,000 attempts a day (Council); port systems going offline for days listed among reported effects, no port, country or source named [11] (30 Apr 2026)
Where it sits
How it spreads
Between 26 Oct 2026 and 25 Oct 2027, a cyberattack halts operations at a UAE seaport, a UAE commercial airport, or a UAE oil, gas or power operation for at least 24 hours, as confirmed by a UAE official source or two independent reports.
Not under wayChannels 4 on the card
- CanadaCanadians in or transiting the UAE would be hit; no sourced trade loss.
- Air travelA day's halt at Dubai International would strand travellers and connections across three continents.
- Ports and re-exportsA port halt would delay re-export cargo for neighbours (not sized).
- EnergyA halt at an oil or gas site would interrupt exports and supply (not sized).
Sectors 3
- Ports and logistics
- Energy and pipelines
- Technology
Countries 2
- United Arab Emirates primary
- Canada
Who is exposed
- Countries
- United Arab Emirates, India, United Kingdom, Canada
- Sectors
- Technology, Energy and pipelines, Government services, Aviation, Education, Ports and logistics
- Companies
- BlackBerry (cyber partnership with the UAE Cyber Security Council, PMO, 21 Nov 2025)
Three scenarios and their signposts
- S1
Contained
Attempts stay high but the Council keeps announcing containment.
- S2
A visible hit
A data-wiping or ransomware attack forces a port, airport or plant to manual work for a day or more.
- S3
War-time surge
A renewed strike on Iran brings a new peak in attempts and claims by Iran-linked groups.
| Path | Signpost |
|---|---|
| S1 | Council statements through 2027 with no service outage reported |
| S2 | An official notice of a technical outage at a hub during a new round of strikes |
| S3 | F-0074 resolves yes by 20 Nov 2026. Strature forecast F-0074: 61% (21 Aug 2026) |
No probability is given for the three paths.
Forecasts
Strature forecast linked to this risk
Strature forecast F-0074: 61% (21 Aug 2026) · resolves by 20 Nov 2026
Where the card uses it F-0074 resolves yes by 20 Nov 2026. Strature forecast F-0074: 61% (21 Aug 2026)
A forecast is a probability on a dated question. The Likelihood score above is a separate judgement and is never turned into a percentage.
The forecast register lists every forecast and how it is scored.
Dates to watch
The dates to watch
A dot is a day, a bar a month or a year; a hollow mark is tentative. The line marks today.
- 20 Nov 2026 Strature F-0074 (renewed US or Israeli strike on Iran) resolves. Strature forecast F-0074: 61% (21 Aug 2026) [8] Declared · Strature date
- 25 Oct 2027 End of this card's window (Strature's choice) Declared · Strature date
Sign in, with alerts on, for an email 7 days and 1 day before.
The other side
The UAE is building a defence industry around the threat: the UAE Cyber Factory launched in May 2026 with CPX Holding [3]. Strature's view: demand for security and incident-response services in the Gulf is rising; this is not a view on any company.
Connected in Strature
- Iran, the Strait of Hormuz, and a renewed strike
- United Arab Emirates
- Canada
- The Strait of Hormuz shuts again Driven by: The Iran war is the source of the attack surge.
- An Iranian strike halts a UAE port, plant or airport Shares a channel: Both hit the same UAE ports and energy sites, one physically, one through networks (Strature's view).
Sources
11 sources, numbered as the text cites them
- UAE foils organised terror-linked cyber attacks on digital infrastructure (citing WAM). All India Radio News · 22 Feb 2026 · News · confidence medium · retrieved 25 Oct 2026
- UAE thwarts cyber attacks targeting energy and aviation sectors (citing WAM). Arab News · 10 Aug 2026 · News · confidence medium · retrieved 25 Oct 2026
- Iran's IRGC behind many cyberattacks on UAE, says security chief. The National · 16 Sep 2026 · News · confidence medium · retrieved 25 Oct 2026
- UAE foils around 750,000 cyberattacks targeting sectors including energy, education (citing WAM). Khaleej Times · 21 Oct 2026 · News · confidence medium · retrieved 25 Oct 2026
- The UAE is fighting AI hackers with AI of its own. Rest of World · 24 Aug 2026 · News · confidence medium · retrieved 25 Oct 2026
- Iran-linked group Handala claims to have breached three major UAE organizations. Security Affairs · 13 Apr 2026 · News · confidence low · retrieved 25 Oct 2026
- DXB sets new global benchmark as record traffic volumes become the norm. Dubai Media Office · 11 Feb 2026 · Official · confidence high · retrieved 25 Oct 2026
- Forecast register, F-0074 (S-001). Strature · 21 Aug 2026 · Think tank · confidence high · retrieved 25 Oct 2026
- Prime Minister Carney secures new agreements with the United Arab Emirates. Prime Minister of Canada · 21 Nov 2025 · Official · confidence high · retrieved 25 Oct 2026
- Canada-United Arab Emirates relations. Global Affairs Canada · 8 Jun 2026 · Official · confidence high · retrieved 25 Oct 2026
- '600,000 cyberattacks a day': Massive cyberattack wave targets UAE and Gulf. WION · 30 Apr 2026 · News · confidence low · retrieved 26 Oct 2026
Reviewed 25 Oct 2026 · version 1 · last change: reviewed · All risks