GISEC – Security Review Magazine https://securityreviewmag.com We bring you the latest from the IT and physical security industry in the Middle East and Africa region. Sat, 10 May 2025 14:40:54 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.1 https://securityreviewmag.com/wp-content/uploads/2024/08/cropped-SRico-32x32.png GISEC – Security Review Magazine https://securityreviewmag.com 32 32 Video: SentinelOne Speaks Hyperautomation, Purple AI, and the Future of Threat Detection at GISEC Global 2025 https://securityreviewmag.com/?p=28213 Sat, 10 May 2025 14:40:54 +0000 https://securityreviewmag.com/?p=28213 Ezzeldin Hussein, Regional Senior Director, Solution Engineering, META, SentinelOne joined us for a fascinating chat! In this video, we dove deep into how SentinelOne’s Singularity Hyperautomation is revolutionising security operations. Discover what makes SentinelOne’s Purple AI different and a TRUE game-changer, and witness how AI is enabling instant real-time threat detection and action. Learn how AI boosts accuracy and silences the noise. Finally, get Ezzeldin’s predictions for the next 5 years of AI-powered security:

]]>
Video: Check Point Unlocks the Middle East’s Cyber Defense Strategies https://securityreviewmag.com/?p=28202 Fri, 09 May 2025 11:31:15 +0000 https://securityreviewmag.com/?p=28202 Uncover the Middle East’s cybersecurity secrets with Ram Narayanan, Country Manager at Check Point, at GISEC Global 2025! We dive into their highlighted solutions tackling regional threats, the power of their Hybrid Mesh Architecture, and why Check Point is doubling down on the Middle East with big investment and expansion plans. Plus, learn how they’re securing critical UAE infrastructure and boosting engagement with partners and customers. Don’t miss these key insights:

]]>
Video: HUAWEI’s Alignment with UAE’s National Cybersecurity Strategy and Vision 2030 at GISEC Global 2025 https://securityreviewmag.com/?p=28185 Thu, 08 May 2025 15:19:44 +0000 https://securityreviewmag.com/?p=28185 How does Huawei demonstrate its dedication to global cybersecurity at events like GISEC Global 2025? What groundbreaking security innovations did Huawei present this year? How is Huawei contributing to the UAE’s national cybersecurity ambitions? We sat down with Abdulaziz AlNuaimi, Chief Security Officer, Huawei UAE, at GISEC Global 2025 to get the answers! He shares key insights into these questions, along with Huawei’s future cybersecurity priorities in the Middle East and their overarching message for a secure digital world. Watch now to learn more:

]]>
Video: Fortinet’s Middle East Security Insights at GISEC Global 2025 https://securityreviewmag.com/?p=28182 Thu, 08 May 2025 15:03:13 +0000 https://securityreviewmag.com/?p=28182 We sat down with Shadi Khuffash, Sr. Regional Director for South Middle East at Fortinet, at GISEC Global 2025! He shares critical insights on the current security threats impacting Middle East businesses, the key Fortinet products and solutions highlighted at GISEC, and the valuable opportunities the event offers for connection and collaboration. We also dove into regional compliance, the role of AI in cybercrime, and Shadi’s essential cybersecurity advice for companies in the Middle East:

]]>
Dubai Hosts GISEC 2025, Driving Billion-Dollar Cyber Growth https://securityreviewmag.com/?p=28176 Wed, 07 May 2025 07:01:02 +0000 https://securityreviewmag.com/?p=28176 Leveraging AI to help build secure and resilient infrastructures and redefining the future of the cybersecurity industry were among the key topics explored at GISEC Global 2025 as the world’s third-largest cybersecurity event got underway today. Held under the theme of ‘Securing an AI-Powered Future,’ the annual event has attracted more than 750 of the world’s foremost cybersecurity companies, 450 global CISOs and futurists and 25,0000 visitors from over 160 countries.

With the global cybersecurity market anticipated to be worth $298.5 billion by 2028, according to Markets and Markets, the 14th edition’s opening day saw several panel discussions, workshops and roundtables take place, focusing on the power of AI and how it’s changing the cybersecurity landscape.

H.E. Dr Mohamed Al-Kuwaiti, Head of the UAE Cybersecurity Council, delivered a powerful speech on the importance of harnessing AI, navigating geopolitical tensions and securing the Digital Future. He revealed an alarming statistic: the UAE is facing more than 200,000 daily cyberattacks, with government entities being the most targeted. Robust measures are being taken, he said, and with the advent of the fifth industrial revolution, cybersecurity must evolve to tackle the threats posed by AI tools. He highlighted human-data interfaces, autonomous systems and AI governance and digital ethics as key areas that the industry needs to rapidly review.

He said, “Cybersecurity has become an integral part of everything that we do, and the UAE is already moving towards becoming an AI-nation in cybersecurity. There are so many great pillars as part of our UAE National Cybersecurity Strategy that focus on governance, innovation, defence and protection – all of which remain vital for the future.”

Renowned cybersecurity expert and entrepreneur, Eugene Kaspersky, CEO and founder of Kaspersky, was among the speakers to take to the stage. Addressing the audience, he described AI as a tool that is benefiting both cybercriminals and businesses, but emphasised that greater efforts need to be implemented by organisations to help build a safe AI-driven future.

He said, “We are living in a world where it’s very much AI vs AI – defence against attack. With that said, the world is interconnected through digitalisation and is part of every aspect of our everyday lives. Using AI will only take that to the next level and will make things faster and better. However, unfortunately, we are facing issues with cybercrime, and that can stop us from using AI globally, but the good news is that cybersecurity companies are investing and working on immunity that will make future systems impeccable and secure, which can help us take the next stage.”

Attendees also gained a fascinating insight into Dubai’s ongoing commitment to protecting the emirate digitally at a time when it is accelerating its efforts to become a ‘smart’ city. During his presentation, Faisal Abdulaziz, Director of the Cybersecurity Threat Center of Dubai Electronic Security Center (DESC), highlighted the work the organisation is doing to embed cybersecurity into every layer of Dubai’s digital transformation, safeguarding the city’s smart services, critical infrastructure and digital economy – with a key focus on talent development.

Another speaker to address the audience was Aarti Borkar, CVP of Security, Customers Success and Incident Response at Microsoft. She revealed that 80 per cent of leaders cited leakage of sensitive data as their main concern, while 88 per cent of organisations are concerned about indirect prompt injection attacks, emphasising the importance of secure and resilient infrastructure.

“Success in AI is defined by your practical techniques and security must come above all else,” she said. “When it comes to building safe systems, you must plan the final stage as a perfect solution that you can use and then create milestones on how you get there. Then work on the thing that will hurt the most first, and then gradually the next element. Every day, you have to move towards the next step of being safe and staying compliant, so we can use AI safely and efficiently.”

The event has brought together some of the leading players in the industry, including Huawei, AWS, Microsoft, Google Cloud Security, CISCO, Deloitte, Kaspersky, Check Point, Cloudflare and Honeywell, alongside groundbreaking cybersecurity companies Spire Solutions, CPX, CyberKnight, LinkShadow, OPSWAT, Qualys, CrowdStrike and StrikeReady.

GISEC Global 2025, which is hosted by the UAE Cyber Security Council, supported by DESC, the UAE Ministry of Interior and Dubai Police, will continue on Wednesday with more engaging panel discussions and thought-provoking debates on AI’s pressing issues from weaponised large language models (LLMs) to next-gen AI-powered defences. Rysha Media is the official media partner of the event.

]]>
GISEC Global 2025: A Vital Platform to Connect With Customers and Partners in the Region https://securityreviewmag.com/?p=28166 Mon, 05 May 2025 15:19:02 +0000 https://securityreviewmag.com/?p=28166 Ram Narayanan, Country Manager at Check Point Software Technologies for the Middle East, says, organisations in the region are experiencing an average of 2,288 attacks per week

What key messages or solutions are you highlighting at GISEC this year?
At GISEC 2025, Check Point Software is focusing on delivering AI-powered cybersecurity innovations that address the specific challenges faced by businesses in the UAE and the wider GCC region. The company is emphasizing practical, prevention-first solutions to help organizations tackle evolving cyber threats. Key themes include collaboration and integrated security, offering multi-layered protection across networks, cloud environments, endpoints and applications. By combining real-time intelligence with adaptable technologies, Check Point Software is demonstrating how businesses can enhance their cyber resilience and support secure digital transformation in the region.

How does GISEC help your company engage with the Middle Eastern cybersecurity market?
GISEC serves as a vital platform for Check Point Software to connect directly with customers and partners in the region. The event enables the company to understand regional security needs, showcase innovations and foster collaboration with local and global technology partners. Through GISEC, Check Point Software can demonstrate its proactive, prevention-first approach to cybersecurity, while also engaging with government agencies, businesses and security professionals to drive knowledge exchange and ensure that cybersecurity strategies are aligned with regional threats and regulatory requirements. Check Point Software’s growing role in the region includes efforts to build cyber security talent through its SecureAcademy program, enhance support for managed security service providers (MSSPs) and foster innovation with local technology alliances. These investments reflect the company’s continued leadership in the region and its vision for enabling secure digital transformation.

How would you describe the current cybersecurity threat landscape in the Middle East?
The cybersecurity landscape in the Middle East is increasingly complex and fast-evolving, marked by a high volume of attacks targeting key sectors like education, communications and utilities. Organizations in the region are experiencing an average of 2,288 attacks per week, well above the global average. Malware threats such as FakeUpdates, Phorpiex botnets and AgentTesla infostealers are prominent, while vulnerabilities linked to information disclosure are the most frequently exploited, impacting nearly three-quarters of organizations. The rise of state-sponsored cyber activities, combined with increased attacks on cloud and hybrid environments, underscores the need for proactive, multi-layered security strategies to defend against a broad spectrum of threats.

What are the most pressing cyber threats facing businesses in the region today?
Businesses in the Middle East face a diverse range of cyber threats, from widespread malware infections to sophisticated targeted attacks. Infostealers, botnets and remote access trojans are prevalent, with attackers frequently leveraging web-based delivery mechanisms, accounting for over 50% of malicious file distribution in recent weeks. Vulnerabilities tied to information disclosure continue to be heavily exploited, while misconfigurations in cloud and hybrid infrastructures are creating additional risk. There’s also a growing trend of cyberattacks aimed at supply chains and third-party vendors. Together, these threats highlight the urgent need for comprehensive protection across all attack surfaces, including web, cloud, endpoints and applications.

How do cultural or regulatory differences impact cybersecurity strategies in the Middle East compared to other regions?
The Middle East’s unique cultural and regulatory environment shapes cybersecurity strategies. Local laws around data residency and privacy, such as the UAE’s national data residency requirements, necessitate customized security solutions. Check Point Software supports these needs with region-specific solutions, including the UAE Infinity Portal, which complies with national data laws and Infinity XDR/XPR, a regionally launched platform combining extended detection and response with automated prevention. Navigating diverse regulations across the region is essential as businesses accelerate digital transformation.

How do your company’s products and services address the specific threats faced by regional businesses?
Check Point Software’s cybersecurity portfolio is designed to meet the dynamic needs of businesses in the Middle East through a prevention-first approach, unified visibility and real-time intelligence. The Infinity architecture offers AI-driven protection across every vector, network, cloud, endpoint, IoT and email—empowered by Infinity ThreatCloud AI, which ingests regional threat intelligence. With solutions like Infinity XDR/XPR, Check Point Software helps businesses detect and respond to threats faster while ensuring compliance with local regulations, enabling stronger cyber resilience amid rising attack volumes.

Are you partnering with any local entities or governments to enhance regional cybersecurity resilience?
Check Point Software is actively collaborating with regional partners to strengthen cybersecurity resilience across the region. At GISEC 2025, the company is participating alongside partners like AWS, Radware, TechBridge Distribution MEA and WIZ. These partnerships support efforts to align security technologies, knowledge sharing and regional priorities, helping organizations enhance their resilience in an increasingly complex and fast-moving threat environment. The company’s growing role in the region reflects its commitment to supporting organizations in securing their digital transformation while contributing to the region’s cybersecurity ecosystem.

What advice would you give to regional businesses looking to strengthen their cybersecurity posture in 2025?
Businesses in the region should prioritize a proactive, prevention-first approach to cybersecurity, focusing on AI-driven solutions that can detect and neutralize threats in real-time. Ensuring cloud environments are secure, addressing misconfigurations and safeguarding edge devices are essential steps. Additionally, businesses should implement robust access control measures and continuously upskill their teams to stay ahead of emerging threats. Embracing automated threat intelligence will also help organizations maintain strong defenses in an ever-evolving threat landscape.

]]>
DESC to Highlight Dubai’s Cyber Defense Strategies as GISEC 2025 Government Partner https://securityreviewmag.com/?p=28164 Mon, 05 May 2025 14:17:37 +0000 https://securityreviewmag.com/?p=28164 The Dubai Electronic Security Center (DESC) is set to participate as the official government cybersecurity partner for the eighth consecutive year in the 14th edition of the Gulf Information Security Expo and Conference (GISEC Global 2025), taking place from May 6-8 at the Dubai World Trade Centre. The Center’s participation in GISEC Global 2025, which gathers over 25,000 cybersecurity professionals representing more than 160 countries, aligns with its strategic objectives aimed at advancing the Dubai Cyber Security Strategy and reinforcing Dubai’s position as one of the world’s digitally safest cities.

This participation reflects the Center’s commitment to safeguarding digital infrastructure, fostering innovation, enhancing cyber resilience, and promoting robust cooperation at both the local and international levels. During the three-day event, DESC will spotlight a number of key initiatives, including the “Dubai Cyber Challenge”, an exclusive competitive simulation designed to enhance the cyber readiness of Dubai government entities, and the “School of Cyber Defense” CTF competition, which attracted registrations from over 300 university students, engaging them in technical challenges and hands-on training. These programs form a key part of DESC’s ongoing efforts to build a pipeline of skilled cybersecurity professionals equipped to navigate evolving digital threats.

H.E. Yousuf Hamad Al Shaibani, CEO of the Dubai Electronic Security Center, commented, “DESC’s participation in GISEC Global 2025 reflects our steadfast commitment to securing Dubai’s digital future through proactive cybersecurity measures, innovation-driven initiatives, and an integrated ecosystem that fosters collaboration by building partnerships across public and private sectors. GISEC continues to serve as a dynamic platform where industry leaders, experts, and innovators come together to shape the future of cybersecurity.”

“GISEC 2025 provides a critical platform for strategic engagement with global cybersecurity innovators, allowing us to gain insights into emerging technologies and anticipate future threats. These interactions directly support our efforts to create forward-looking policies, develop advanced cyber solutions, and empower national talent to lead in this field. Through such initiatives, we continue to strengthen Dubai’s position as a global hub for cybersecurity excellence and digital innovation,” Al Shaibani added.

DESC experts will also take part in high-level panel discussions addressing key challenges and emerging trends in the cybersecurity landscape. The Center will also formalize strategic partnerships and Memorandums of Understanding (MoUs), aimed at enhancing cross-sector collaboration and strengthening national efforts to secure the cyber space.

Visitors to GISEC Global 2025 are invited to explore DESC’s initiatives at Stand A80 in Hall 7, where DESC will showcase its latest projects, including future-ready cybersecurity guidelines and certification programs designed to keep pace with the evolving digital landscape and strengthen national capabilities. The stand will also serve as a unique opportunity for attendees to engage with DESC’s experts and explore opportunities for joint collaboration.

]]>
GISEC Global 2025: Businesses Must Prioritise Hands-On Skills Development https://securityreviewmag.com/?p=28151 Fri, 02 May 2025 06:50:24 +0000 https://securityreviewmag.com/?p=28151 Ned Baltagi, the Managing Director for Middle East, Africa, and Turkey at SANS Institute, says, technology alone will not solve today’s challenges

What key messages or solutions are you highlighting at GISEC this year?
At GISEC 2025, SANS is focused on turning knowledge into action by expanding access to world-class cybersecurity training. We’re highlighting the launch of the SANS GISEC Academy in Hall 4, a free, three-day program offering technical sessions led by SANS Certified Instructors on offensive operations, ICS incident response, and cyber threat intelligence. It’s the first time we’re introducing this hands-on learning format at GISEC, making expert-driven training accessible to attendees of all backgrounds and experience levels. At our main stand (Hall 7, Stand D75), we’re also showcasing how SANS is helping organizations build long-term cyber resilience across the region through practical, skills-based education.

How does GISEC help your company engage with the Middle Eastern cybersecurity market?
GISEC is one of the region’s main platforms for bringing together like-minded cybersecurity professionals from around the world. It allows us to connect with organizations, partners, and customers on a closer, one-to-one basis, opening conversations not just about the critical role of ongoing training, but also helping us better understand regional skills gaps. These insights allow us to tailor our programs to meet the evolving needs of the Middle Eastern cybersecurity community and support long-term resilience.

How would you describe the current cybersecurity threat landscape in the Middle East?
The Middle East is facing one of the most dynamic and challenging cybersecurity environments in the world. As digital transformation accelerates across sectors like energy, finance, and government, the attack surface is expanding quickly. Threat actors, ranging from cybercriminals to nation-states, are becoming more sophisticated, targeting critical infrastructure, supply chains, and sensitive data. We are seeing a rise not just in the volume of attacks, but in the precision and persistence behind them.

What are the most pressing cyber threats facing businesses in the region today?
Ransomware remains one of the most disruptive threats, particularly to critical industries like energy, healthcare, and finance. Phishing attacks have grown more sophisticated, often fueled by AI tools that create highly convincing emails and deepfakes. Beyond that, state-sponsored attacks are growing in frequency and complexity, often blending espionage with disruption. Businesses in the Middle East must be prepared for adversaries who are patient, well-resourced, and highly strategic in their operations. The rise of AI in cyberattacks is reshaping the threat landscape, making it essential for businesses to invest in AI-driven defenses, improve employee awareness, and develop stronger incident response strategies.

How do cultural or regulatory differences impact cybersecurity strategies in the Middle East compared to other regions?
Cultural and regulatory landscapes across the Middle East create both challenges and opportunities for cybersecurity. On the regulatory side, we see a strong push from governments to enforce data protection laws and critical infrastructure standards. This has helped raise cybersecurity awareness at the board level. Culturally, the emphasis on building trusted relationships is key, and cybersecurity initiatives that incorporate strong internal education and cross-team collaboration tend to succeed. Strategies must be tailored to respect local business practices while still aligning with global security standards.

How do your company’s products and services address the specific threats faced by regional businesses?
By staying closely connected with the community, we ensure our training stays relevant to the real-world challenges businesses here are encountering. Through expert-led training, certifications, and hands-on programs we offer tailored skill-based cybersecurity courses for organizations, designed around their specific pain points.

Are you partnering with any local entities or governments to enhance regional cybersecurity resilience?
Yes, we work closely with local government entities, offering tailored programs that align with regional needs and workforce development goals. Through initiatives like our Cyber Academies, we collaborate with national entities to equip local talent with practical, industry-relevant skills. These programs are inclusive, accessible, and results-driven, often leading to globally recognized GIAC certifications that open doors to long-term careers in cybersecurity.

For instance, last year, our Cyber Academy initiative in Bahrain, delivered in collaboration with a government entity, trained Bahraini nationals aged 18 and above through an intensive eight-week program, culminating in three GIAC certifications. Similarly, we ran two Cyber Academies in Kuwait, helping participants develop practical skills to combat evolving threats in critical sectors. These efforts not only address immediate skills gaps but builds sustainable cybersecurity ecosystems using local talent.

What advice would you give to regional businesses looking to strengthen their cybersecurity posture in 2025?
Start by investing in your people. Technology alone will not solve today’s challenges. Businesses must prioritize hands-on skills development, continuous training, and cultivating a security-first culture across all levels. It is also critical to approach cybersecurity as a business enabler, not just a technical function. That means aligning security investments with business goals, understanding the evolving threat landscape, and building resilience through proactive risk management. Finally, collaborating with trusted cybersecurity partners and participating in regional threat intelligence sharing initiatives will be essential in the year ahead.

]]>
GISEC Global 2025: There is An Increasing Shift Towards More Advanced AI-Driven Threats https://securityreviewmag.com/?p=28148 Fri, 02 May 2025 06:26:06 +0000 https://securityreviewmag.com/?p=28148 Sujoy Banerjee, the Associate Director at ManageEngine, says, a unified security model fosters resilience, agility, and operational efficiency

What key messages or solutions are you highlighting at GISEC this year?
At GISEC this year, our focus is on encouraging organisations to adopt unified security for an evolving threat landscape, as those that don’t are left vulnerable to today’s sophisticated threats. In an environment where threats are becoming more sophisticated and persistent, reliance on fragmented tools and siloed data is no longer sustainable. We are advocating for a shift toward integrated, intelligence-driven security architectures that enable organisations to anticipate, identify, and mitigate threats before they escalate.

At GISEC, we are demonstrating how a unified security model fosters resilience, agility, and operational efficiency—foundations that are critical for modern enterprise security leadership. We’ll be showcasing our cybersecurity suite, including SIEM, IAM, and PAM solutions—alongside the latest advancements in AI technology that are shaping the future of cyber defense.

How does GISEC help your company engage with the Middle Eastern cybersecurity market?
GISEC provides an opportunity to engage directly with the Middle Eastern cybersecurity market by showcasing our innovative solutions in a region that is rapidly evolving its security strategies. Through GISEC, we are able to demonstrate how adaptive, AI-driven defense mechanisms can empower organisations to transition from reactive to proactive security models. This aligns perfectly with the region’s growing focus on building resilient infrastructures in response to increasingly sophisticated cyberthreats.

The event allows us to collaborate on fostering a culture of cybersecurity resilience that not only addresses immediate threats but also anticipates future risks. By participating in GISEC, we gain deeper insights into regional needs, enhance brand visibility, and strengthen our partnerships across the Middle East.

How would you describe the current cybersecurity threat landscape in the Middle East?
The cybersecurity threat landscape in the Middle East is evolving rapidly, reflecting the region’s critical infrastructure and geopolitical importance. As of 2025, the primary challenge facing organisations in the Middle East extends beyond traditional threat vectors, with an increasing shift towards more advanced, AI-driven threats. These include highly sophisticated phishing campaigns and ransomware attacks, which are poised to become more targeted and difficult to detect.

This indicates not just an escalation of existing threats but a significant shift in the very nature of cyber warfare. The convergence of cutting-edge technologies and strategic regional vulnerabilities makes the Middle East a focal point for emerging cyberthreats, demanding a more dynamic and proactive cybersecurity strategy. In response, organisations must adopt next generation defence mechanisms that can anticipate and neutralise these sophisticated risks before they cause damage.

What are the most pressing cyber threats facing businesses in the region today?
Some of the key recent cybersecurity-related threats in the Middle East have been:

  1. Ransomware attacks: High-profile cybersecurity attacks are occurring across industry verticals (e.g., oil and gas, BFSI, and healthcare).
  2. AI-driven cyberthreats: The rapid adoption of AI and machine learning (ML) capabilities across industry verticals is empowering cyberattackers with newer forms of AI-driven attacks, leading to theft and loss of sensitive data due to ransomware.
  3. Phishing attacks: Phishing attacks have been on the rise, with AI-powered phishing making scam attempts tougher to detect.
  4. Cloud vulnerabilities: Cloud adoption has been increasing in the Middle East; this has led to an increased risk of cloud vulnerabilities, as misconfigurations in storage, exposed APIs, and weak IAM policies can lead to further cyber risk.

How do cultural or regulatory differences impact cybersecurity strategies in the Middle East compared to other regions?
Each region will have its own unique challenges and needs to address, especially on the cybersecurity front. The Middle East has been largely affected by spiking AI-powered cyberattacks and ransomware scams that have resulted in huge business losses. In a region that employs emerging technologies like AI and ML, it is also important for organisations to upgrade and enhance their cybersecurity postures with the latest tech to counter such threats.

In addition to this, each region will have its own regulations to adhere to since compliance regulations vary with location. At ManageEngine, we actively ensure that our customers are compliant with local regulations through our suite of IT solutions and also focus on the needs of each region by prioritising cybersecurity needs, like those in the Middle East.

How do your company’s products and services address the specific threats faced by regional businesses?
ManageEngine offers a comprehensive suite of IT solutions that enables regional organisations to stay secured and work without operational delays. Our cybersecurity suite of solutions comprises solutions that cater to the core domains of IAM, SIEM, and PAM, amongst others. Our cybersecurity solutions help organisations meet the cybersecurity demands of today and ensure their data privacy concerns are taken care of.

We also enable regional organisations to meet industry standards and adhere to regional compliance mandates (e.g., the GDPR, HIPAA, and the PCI DSS) to ensure that data privacy and regulatory requirements are met. Apart from this, we also ensure continuous monitoring of the IT environment to address and mitigate cyber breaches to enable rapid incident response and prompt resolution of threats. On top of all of this, customisation is key to our model—it allows us to address the evolving threat landscape while offering flexibility and adaptability for each of our customers’ unique needs.

What advice would you give to regional businesses looking to strengthen their cybersecurity posture in 2025?
The cybersecurity landscape has been rapidly evolving with an expanding threat landscape only accelerated by the evolution of emerging technologies such as AI and ML. It is important for regional businesses to secure themselves both on-premises and in the cloud since bad actors exploit endpoint vulnerabilities, cloud loopholes, and outdated cyber infrastructure with AI-powered cyberattacks. Regional businesses should prioritise deploying an overarching cybersecurity strategy that enables them to secure their digital assets to ensure they can ward off ransomware attacks and manoeuvre through cyberthreats.

]]>
GISEC Global 2025: There’s a Rise in Malware and Ransomware Campaigns Moving From IT to OT Systems https://securityreviewmag.com/?p=28125 Mon, 28 Apr 2025 13:25:13 +0000 https://securityreviewmag.com/?p=28125 Luis Ferreira, the Regional Sales Director for MEA at Nozomi Networks, says the Middle East faces a highly dynamic and sophisticated threat landscape

What key messages or solutions are you highlighting at GISEC this year?
At GISEC this year, we’re showcasing how Nozomi Networks is accelerating digital transformation while safeguarding critical infrastructure. Our focus is on delivering unified OT, IoT, and ICS cybersecurity and visibility solutions that empower not operators across energy, utilities, transportation, manufacturing, but also other key sectors such as Financial services, Healthcare or Government to identify and respond to threats faster and more effectively. With our AI-driven platform, deep protocol support, and robust asset visibility, we help security and operations teams achieve cyber-physical resilience without sacrificing performance.

How does GISEC help your company engage with the Middle Eastern cybersecurity market?
The Middle East is a very important and strategic market for us, where we have been investing and growing steadily over the past 7 years. GISEC is one of the most important cybersecurity events in the region, and it provides an ideal platform for us to connect with customers, partners, and government stakeholders. It allows us not only to showcase our latest innovations but also to listen and learn, gaining a deeper understanding of the evolving challenges businesses in the Middle East are facing. The face-to-face engagement at events like GISEC is invaluable and helps us continuously tailor our solutions and messaging to better serve the regional market.

How would you describe the current cybersecurity threat landscape in the Middle East?
The Middle East faces a highly dynamic and sophisticated threat landscape. As critical infrastructure modernises and smart technologies expand, the attack surface is growing rapidly. IoT devices are now embedded across sectors like energy, utilities, transportation, financial services, retail, and healthcare, creating new vulnerabilities beyond traditional IT and OT environments. The increasing interconnectedness between physical systems and digital networks means that a cyberattack can have wide-reaching operational, financial, and even safety consequences. This evolution demands a holistic approach to security, one that addresses IoT risks, bridges IT and OT defenses, and ensures resilience across all industries

What are the most pressing cyber threats facing businesses in the region today?
For organisations operating critical infrastructure, the most pressing threats are those targeting operational technology (OT) environments. We’re seeing a significant rise in malware and ransomware campaigns designed to move laterally from IT to OT systems, disrupting operations and causing costly downtime. Legacy systems with limited security controls make industrial environments especially vulnerable. Supply chain attacks and insider threats are also a growing concern, particularly in sectors like energy, water, and manufacturing, where any disruption can have wide-reaching impact.

Many threats go undetected until operational processes are already affected, making early detection and real-time monitoring critical. At the same time, the rapid growth of IoT devices is expanding the threat landscape far beyond traditional OT environments. In sectors such as financial services, retail, and healthcare, IoT technologies – from smart payment systems to connected medical devices – are introducing new risks. These devices often lack robust security features, creating entry points for attackers seeking to access sensitive data or disrupt essential services. As organisations continue to innovate and digitise, securing the IoT ecosystem is becoming just as critical as protecting core IT and OT infrastructures

How do cultural or regulatory differences impact cybersecurity strategies in the Middle East compared to other regions?
Cybersecurity strategies in the Middle East are deeply influenced by national security priorities and regulatory frameworks. Countries across the GCC are leading with strong cybersecurity mandates, such as Saudi Arabia’s NCA regulations, the UAE’s National Cybersecurity Strategy under the Cyber Security Council, and Qatar’s NCSA initiatives. As the threat landscape becomes increasingly tied to issues of cyber warfare and geopolitical tensions, governments and critical industries are prioritising resilience not just against cybercrime, but against nation-state-level threats that can target national infrastructure, financial stability, and public safety. Furthermore, building trust is paramount. Cultural understanding plays a critical role in how businesses partner, share threat intelligence, and collaborate on security initiatives. It’s about respecting local norms and sensitivities, while also aligning with global best practices to strengthen collective cyber defense across the region

How do your company’s products and services address the specific threats faced by regional businesses?
Nozomi Networks is purpose-built to secure the critical OT and IoT systems that power the Middle East’s most vital industries. As organisations in energy, utilities, transportation, healthcare, financial services, and smart cities modernise, the risk landscape grows—and so does the need for specialised security. Our platform delivers real-time visibility across complex industrial environments, rapidly detects emerging threats and anomalies, and enables swift, decisive response to minimise disruption.

Beyond technology, we help our customers meet evolving regional cybersecurity regulations and national security mandates, ensuring both resilience and compliance. Whether it’s protecting a remote gas pipeline, a national water system, a hospital, a bank or a smart city grid, Nozomi Networks provides the depth, flexibility, and local expertise needed to defend today’s most critical infrastructure

Are you partnering with any local entities or governments to enhance regional cybersecurity resilience?
Yes, we’re actively collaborating with local partners, system integrators, and government-affiliated organisations across the region. These partnerships are key to delivering localised support, enabling knowledge transfer, and aligning with national cybersecurity priorities. Our goal is to be a trusted advisor in building regional cyber resilience, through both technology and training.

What advice would you give to regional businesses looking to strengthen their cybersecurity posture in 2025?
In 2025, cybersecurity resilience will start with one critical principle: visibility. You can’t protect what you can’t see. Regional businesses must gain a clear, real-time understanding of every asset, vulnerability, and access point across their environments, especially as OT and IoT ecosystems grow. Security must be embedded into OT operations from the ground up, not treated as an afterthought.

Move beyond traditional perimeter defenses and invest in continuous, proactive monitoring that can detect and respond to threats before they disrupt your operations. And most importantly, don’t face these challenges alone. Partner with specialists who truly understand the complexity of securing OT and IoT in the Middle East. The threat landscape is evolving fast and your cybersecurity strategy must evolve even faster.

]]>