Exploit3rs Brings Real-World Cyberattack Simulations to Dubai Municipality’s Cybersecurity Week

Exploit3rs Cybersecurity Academy is introducing interactive cyberattack simulations, digital investigations and live-hacking demonstrations at Dubai Municipality’s Cybersecurity Week, running from October 27 to 29, 2026, at the Radisson Blu Hotel, Dubai Creek.

The initiative aims to strengthen workplace cybersecurity awareness by allowing employees to investigate simulated security breaches, identify phishing attempts and experience how cybercriminals exploit common digital vulnerabilities.

The Dubai-based academy is presenting three hands-on training formats: a Cyber Escape Room, touchscreen-based Cyber Missions and a live-hacking workshop. Designed for participants with varying levels of technical knowledge, the activities place employees in realistic scenarios where their decisions determine how simulated attacks unfold.

Cyber Escape Room Turns Security Awareness into a Timed Investigation

The Cyber Escape Room is a central feature of Exploit3rs’ participation, transforming cybersecurity education into a team-based investigation lasting approximately 20 minutes.

Participants work in small groups to solve a simulated cybercrime case. The challenge involves decrypting passwords, identifying phishing emails, locating confidential files and analysing digital evidence to determine the identity of a fictional attacker.

Teams must complete the investigation and unlock the exit before the countdown expires. Exploit3rs specialists guide participants through the exercise, while a live countdown displayed outside the room allows other attendees to follow the teams’ progress.

The activities are designed to demonstrate how everyday security weaknesses can contribute to larger incidents and how investigative techniques can help identify suspicious activity.

Interactive Cyber Missions Simulate Attacks and Victim Experiences

Exploit3rs is also showcasing Cyber Missions, an interactive training format delivered through touchscreen kiosks. Each mission takes approximately three to four minutes and introduces employees to the methods used to carry out common cyberattacks.

Participants initially assume the role of a cybercriminal to understand how fraudulent schemes are designed. The scenario then shifts, placing them in the position of an employee encountering a similar threat during routine workplace activities.

The format is intended to help participants recognise manipulation techniques, identify warning signs and understand the consequences of interacting with malicious links, suspicious emails or fraudulent requests.

The five missions cover:

• Account compromise

• Password security

• Risks associated with USB devices

• Email phishing

• Verification of requests to change payment details

All missions are available in Arabic and English. According to Exploit3rs, the activities do not assign participant scores or collect and retain personal information.

Exploit3rs CEO Calls for More Practical Cybersecurity Training

Juma Alshamsi, Founder and CEO of Exploit3rs Cybersecurity Academy, said traditional awareness programmes often test whether employees can recognise suspicious activity without adequately assessing how they respond to realistic threats.

“Most cybersecurity awareness programmes show employees a suspicious email and ask whether they would have recognised it. The answer is often yes. Through our participation in Dubai Municipality’s Cybersecurity Week, we are taking a more practical approach by giving employees the opportunity to construct simulated phishing scenarios themselves before encountering similar threats in realistic workplace situations,” Alshamsi said.

He added that experiential training allows employees to develop a deeper understanding of cyber risks and assess their ability to identify potential attacks.

The academy aims to make this form of training more accessible to organisations across the UAE, allowing employees to learn about cybercriminal techniques in controlled environments before encountering similar situations in the workplace.

Live-Hacking Workshop Demonstrates Everyday Cybersecurity Risks

The programme also features a workshop titled “Who’s Watching?”, scheduled for October 28. Led by Fares Hassanin, Head of Cyber Range and Education at Exploit3rs Cybersecurity Academy, the session is designed for employees without specialised technical backgrounds.

The workshop includes two live demonstrations showing how vulnerabilities in commonly used workplace technologies can expose individuals and organisations to cyber risks.

The first demonstration, “The Email Trap”, explores how opening an apparently routine email attachment could potentially expose a laptop’s webcam to unauthorised access.

The second, “The Silent Break-In”, demonstrates how a computer running an outdated version of Windows could be compromised without any action by its user. The simulated attack involves a vulnerability from the same family associated with the WannaCry ransomware outbreak, which disrupted computer systems worldwide in 2017.

Hassanin, who specialises in offensive cybersecurity and vulnerability discovery, will also present seven practical cybersecurity habits intended to reduce exposure to common threats.

The workshop will conclude with guidance on the essential actions employees should take during the first five minutes after a suspected security breach, emphasising early detection and an appropriate initial response.

Dubai Municipality’s Cybersecurity Week Addresses Emerging Digital Threats

Beyond Exploit3rs’ activities, Dubai Municipality’s Cybersecurity Week includes awareness sessions covering workplace fraud, social engineering, children's digital safety and emerging cyber threats associated with artificial intelligence.

The programme brings cybersecurity awareness into a workplace setting, highlighting the role employees play in identifying suspicious activity and following appropriate security procedures.

By combining interactive exercises with live demonstrations, the initiative seeks to move beyond conventional presentations and give participants practical exposure to common digital threats.

Exploit3rs Plans Wider UAE Rollout of Interactive Training

Following its participation in the event, Exploit3rs Cybersecurity Academy plans to expand its three training formats across government entities and private-sector organisations in the UAE.

The proposed expansion would allow organisations to host Cyber Escape Rooms at their own premises, deploy Cyber Missions touchscreen kiosks and arrange cybersecurity awareness workshops in Arabic and English.

The academy says the initiative forms part of its broader effort to make practical cybersecurity education more accessible and improve employee preparedness against increasingly complex digital threats.

Exploit3rs Reports Training 4,000 Individuals

Based in Dubai, Exploit3rs Cybersecurity Academy specialises in hands-on cybersecurity education, awareness programmes, cyber ranges, practical security laboratories and simulated cyberattacks.

According to the academy, it is licensed by the Knowledge and Human Development Authority (KHDA), with its activities aligned with the requirements of the National Electronic Security Authority (NESA).

The organisation reports having trained approximately 4,000 individuals, organised 23 specialised events and developed more than 300 practical cybersecurity laboratories.

It also operates Hacking Dungeon, a dedicated cybersecurity training platform offering practical environments for vulnerability discovery and simulated cyberattacks.

Exploit3rs has received several industry recognitions, including the Judges’ Choice Award at North Star Startups during GISEC Global 2025 and the Startup of the Year Award at the CyberAI Summit and Awards 2025.