60% of organizations in Middle East and Africa (MEA) have fully operationalized data sovereignty.

38% of organizations in MEA report reliance on third-party ecosystems and vendors, increasing supply-chain blind spots.

In 2025, nation-state activity accounted for 56.6% of threat activity in the Middle East.

75% of security leaders in Saudi Arabia report that AI is already improving security operations.

North America accounted for 63.1% of all network-layer DDoS attacks globally, followed by the Middle East (16.1%) and Europe (13.7%).

Europe accounted for 48.4% of all claimed hacktivist attacks, compared with the Middle East (17.7%) and Asia (17.5%).

7% of organizations actively pursuing CMMC 2.0 certification are in Middle East/Africa.

In the Middle East, nearly one-third (30%) of organisations anticipate a decrease in insider threats.

In the Middle East, unauthorised GenAI is the top insider concern (31%).

18% of hacktivist groups targeted Asia, including the Middle East.