Email has long been the easiest way into an organisation and the most dangerous. For years, it has consistently been the number one entry point for cybercriminals, exploited more than any other pathway. Globally, more than 90% of successful cyberattacks start with a message in the inbox. Every day, 3.4 billion phishing emails are sent worldwide, turning the world’s most basic communication tool into the front door for cybercrime.
What makes the threat more alarming is how it’s evolving. With the rise of artificial intelligence (AI), 73% of organisations have already suffered a security breach due to unmanaged assets, and 91% admit that poor attack surface management puts their business at serious risk. Attackers no longer rely on clumsy messages or obvious errors; they can now craft flawless phishing emails in local languages, mimic executive writing styles, and slip past traditional filters. Fake invoices, government notices, even HR updates look indistinguishable from the real thing. For defenders, the margin for error is shrinking, while for attackers, the cost of launching campaigns has never been lower.
Rising Threat in Saudi Arabia’s Digital Transformation
These global challenges are hitting especially hard in Saudi Arabia. The Kingdom’s rapid digitisation has made it a prime target, with cybercriminals drawn to its growing financial, healthcare, and energy sectors. The KSA Cybersecurity Awareness Survey 2024 revealed that 74% of respondents experienced phishing attacks, underscoring how urgent the problem has become. In a nation leading the way in digital banking, smart energy, and e-health, one fraudulent email is a potential threat to critical services, economic stability, and citizen trust.
A single Business Email Compromise scam or ransomware-laced attachment could bring real disruption, halting financial transactions, compromising patient records, or exposing national infrastructure.
But while the threats continue to rise, Saudi Arabia is not standing still. Cybersecurity has been elevated to a national priority, embedded at the core of Vision 2030. These efforts are now being recognised on the global stage. In the 2025 IMD World Competitiveness Yearbook, Saudi Arabia ranked first worldwide in the cybersecurity indicator, a clear sign that its investments, policies, and cross-sector collaboration are paying off. This achievement is more than just a ranking; it is proof of resilience, demonstrating that rapid digitisation can move forward hand in hand with world-class protection.
Building Resilience Through Vision 2030 and Industry Defense
One example of this shared commitment comes from industry partners. In 2025, Trend Micro’s Vision One™ platform detected and blocked millions of high-risk email threats across Saudi Arabia from phishing campaigns and ransomware to Business Email Compromise scams. Each blocked attempt was a fraud prevented, a citizen safeguarded, and a business kept safe from disruption. The takeaway is that while email threats are pervasive and relentless, proactive, intelligent defense works.
Capabilities like AI-powered detection, integrated threat intelligence, and employee awareness programs are proving essential to closing the gap. For organisations in the Kingdom, adopting layered defenses is about compliance and about ensuring competitiveness, resilience, and public trust.
The next challenge is sustaining this momentum. Every phishing email intercepted is another step toward protecting the Kingdom’s economy, preserving citisen trust, and securing the digital ecosystem envisioned in Vision 2030. To maintain its global leadership, Saudi Arabia must treat the inbox with the same strategic importance as networks, data centers, and critical infrastructure. Because in today’s world, email is the frontline of cyber defense, and it will define whether digital trust can truly scale with digital ambition.
This opinion piece is authored by Wasna Ben Gassem, Managing Director, Saudi Arabia, Trend Micro.
