Crisis Mode: Day 64

Someone forwarded this to you? Subscribe free, daily at 7 AM.

Iran is writing your bank's messages now. 600,000 attacks a day, and they sound like people you know.

UAE Cybersecurity Council chairman Mohammed Hamad Al Kuwaiti confirmed this week what your spam folder has been hinting at. Iranian actors aren't sending clumsy phishing emails anymore. They're using ChatGPT and WormGPT to write them. Specifically: your employer's name, your bank, your building, your actual email pattern. Generated at scale, running 24 hours a day.

The current number is approximately 600,000 cyberattacks per day against UAE targets. Before February 28, it was around 200,000. That's roughly triple, and the quality of the attacks has gone up alongside the volume. The personalization that used to require a human researcher now requires a prompt and about three seconds.

The signal that keeps coming back: Iran publicly threatened the OpenAI Stargate AI data center in Abu Dhabi. A $30 billion, 1-gigawatt facility that OpenAI is building here. They released satellite imagery of the site to back it up. Foreign Policy described this conflict as "the first war against AI infrastructure." Whether that framing holds long-term, the targeting of specific technology assets inside the UAE is confirmed and documented.

Here's the thing. The banking messaging ban that started April 30 wasn't only about regulatory compliance. No licensed UAE bank can contact you via WhatsApp, Telegram, or Signal now. Roughly 75% of cyberattacks start with a phishing email or fraudulent message — and messaging platforms are now a primary delivery channel. The new rule means any message you get from "your bank" on WhatsApp is automatically not your bank. That's a cleaner test than any spam filter.

Spend five minutes this Saturday: check your email account recovery options, confirm your banking app has biometric lock turned on, and if you're in a senior role at work, ask whether IT has had any unusual credential reset requests in the past two weeks. That's the current risk surface, and it's a quiet Saturday morning, which is the right time to deal with it.

1  The weekend storm is easing but not done. NCM advisory still active into Sunday.

NCM's weekend advisory is still running this Saturday. Rain, reduced visibility, strong winds, and blowing dust across multiple emirates. The 72-hour outlook points to the system weakening progressively through Sunday afternoon. If that holds, the Monday commute should clear significantly. But roads and underpasses may carry residual water into Saturday night, worth a check before planning Sunday morning's drive. If you're flying this weekend, confirm your flight status in the airline app before heading to the terminal.

2  Dubai Police's new e-scooter unit went live Friday. No grace period. Fines started yesterday.

Dubai Police and the RTA launched a Personal Mobility Monitoring Unit on May 1. It's enforcing e-scooter and e-bike rules in JBR, Marina, Business Bay, shared paths, and the approaches to major crossings and malls. These are the areas where friction with pedestrians has been highest, partly because delivery rider volumes on personal e-bikes increased during the conflict period when logistics demand shifted.

No grace period. Fines are already running as of Friday. If you or your kids use e-scooters around school zones or residential paths, the RTA updated its approved zone map in April. Five minutes at rta.ae now saves a harder conversation later. The unit is primarily targeting delivery riders on e-bikes, so if you order from platforms that use personal e-bikes, expect slightly longer windows while enforcement is active in your area.

3  Day 64. Ceasefire holds. Trump raised military action again. The Strait is not moving.

The ceasefire is intact this morning. No new strikes overnight. NCEMA has issued no new alerts. Hormuz is running at approximately 5 vessel transits per 24 hours against a pre-crisis baseline of 140 per day. That number has not changed in two weeks.

Trump told reporters May 1 that the US "might need to renew military action" against Iran if nuclear deal terms aren't met. That's the clearest threat since the ceasefire was declared. According to Axios, Iran has responded to US nuclear deal amendments, and that response is what pulled Brent from $126 to $108 on Friday. Whether the engagement is substantive or a tactical pause is not clear yet. No new negotiating format announced, no new session date on record.

Bottom line: ceasefire intact, Brent settling, no negotiating calendar. The story is the same shape it's been for two weeks.

Your inbox is a weapons platform right now. The Cybersecurity Council isn't being dramatic about it, that's just the operational state of Day 64. The ceasefire holds in the strait, the rain is clearing from the sky above you, and you have a quiet Saturday morning. Five minutes on your banking app settings. Worth it.

Tomorrow: whether Sunday clears in time for the Monday commute, and the three things the Cybersecurity Council says residents should do with their banking apps right now.

Dubai Mornings provides general information only. Nothing here constitutes legal, financial, visa, or real estate advice. Verify all claims with official UAE sources before acting.