Acronis – Security Review Magazine https://securityreviewmag.com We bring you the latest from the IT and physical security industry in the Middle East and Africa region. Tue, 25 Feb 2025 05:59:38 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.1 https://securityreviewmag.com/wp-content/uploads/2024/08/cropped-SRico-32x32.png Acronis – Security Review Magazine https://securityreviewmag.com 32 32 “Having Mentors Who Believe in You Can Make All the Difference” https://securityreviewmag.com/?p=27824 Tue, 25 Feb 2025 05:59:38 +0000 https://securityreviewmag.com/?p=27824 Katya Ivanova, the CSO at Acronis, says, the key to strong leadership isn’t about controlling every detail—it’s about providing clear guidance

Can you share your journey into the security world? What inspired you to pursue a career in this field?
It was more by chance than a deliberate career choice. When I was job-hunting after graduation, Acronis reached out to me and invited me to interview for a Support Engineer role. I was initially skeptical since I had no prior IT experience or knowledge in this field (my degree is in Linguistics).

However, Acronis offered an extensive IT skills training program, and I was really impressed by the company and the people I met during the interview process. That convinced me to give it a try. Looking back, it was the best decision I ever made — I fell in love with the IT industry and can’t imagine working in any other field now.

What were some of the biggest challenges you faced as a woman, and how did you overcome them?
The IT industry is still very male-dominated. In 95% of senior leadership meetings with partners and customers, I am often the only woman in the room. A typical Chief Sales Officer (CSO) of a 1,800-employee tech company is usually a 45+ year-old man.

When you’re a 35-year-old female CSO, you quickly realize that even though you hold the same title, the older male counterpart is often granted credibility and trust by default — simply because he fits the usual “norm.” Meanwhile, as a younger female CSO, you have to prove yourself first and earn that same credibility.

The key to overcoming this is knowing your field inside out, being well-prepared for meetings, and showing up as an equal participant — regardless of the underlying feeling of being under extra scrutiny. Confidence and competence go a long way in establishing your authority in the room.

How do you describe your leadership style, and how has it evolved over time?
My leadership style depends heavily on the seniority level of the person I’m working with. I firmly believe that there’s no “one-size-fits-all” approach to people management — each person comes from a different background, has unique work experience, skill sets, and personalities. A great leader can “read” their employees and understand what approach will bring out their best performance and support their growth.

One thing I’ve found universally important, regardless of who I work with, is setting clear goals and explaining the “why” behind them. It sounds simple, but in many countries, these two basic elements are often missing because workplace culture is built around the mentality of “I do this because my boss told me to.”

As a result, people end up doing the bare minimum just to get paid. However, when individuals understand how their work contributes to the team’s and the company’s overall goals — and why those goals matter — they feel inspired and naturally want to contribute more. At the end of the day, people are social beings; we all want to feel like we’re part of something bigger than ourselves.

What strategies do you use to motivate and empower your team?
The key to strong leadership isn’t about controlling every detail—it’s about providing clear guidance while giving your team the space to make decisions and solve problems on their own. When people feel trusted, they take ownership, grow in confidence, and ultimately deliver better results. At the same time, they know that support is there when they need it, which creates a culture of empowerment rather than dependence.

Big strategic initiatives don’t happen overnight. Some take months or even years to come to fruition, and that can be exhausting for a team that’s putting in the work without seeing immediate results. That’s why celebrating progress along the way is so important. When people feel like their efforts are recognised—whether it’s hitting a key milestone or overcoming a major hurdle—it keeps morale high and reminds them that they’re moving in the right direction. Small wins fuel the momentum needed to reach the big goal.

Have you had any mentors or role models who have significantly influenced your career? How did they impact your journey?
Yes, I’ve had — and still have — many mentors. I’ve been fortunate to meet incredible leaders throughout my career who have been willing to support and guide me. Mentors act as sounding boards for my ideas, providing practical advice on what works and what doesn’t. This saves time, helps me avoid common mistakes, and accelerates my learning process.

They’ve also been my biggest supporters, which is especially crucial for anyone advancing quickly in their career. When you grow fast, imposter syndrome often creeps in, making you doubt your abilities until you start seeing tangible successes. Having mentors who believe in you can make all the difference in pushing past those doubts.

What advice would you give to young women aspiring to enter the business world/technology world/security world?
One of the biggest barriers to career growth isn’t external—it’s self-doubt. Too often, women underestimate their abilities and hold back from going after opportunities. I see it firsthand. When hiring for a sales leadership role, I might receive 20 applications, and typically, 17 of them are from men and only three from women.

That means men have an 85% chance of landing the role, not because of bias, but simply because more of them put themselves forward. My advice? Apply for the jobs you aspire to, ask for the opportunities you want, and don’t let doubt be the reason you miss out. The worst outcome is that you don’t get the role—but that’s exactly what happens if you never apply in the first place.

Another common mental barrier is the idea of a ‘right’ or ‘wrong’ time for a career move. Some women hesitate because they feel too young, others because they think they’re too old. But the truth is, if you’re passionate, committed, and driven, people will recognise it and support you. Yes, experience, qualifications, and knowledge matter, but real success is fuelled by motivation. The only real glass ceiling is the one you create in your own mind.

Can you highlight some of your proudest achievements in your career so far?
I’m incredibly proud of what we’ve accomplished at Acronis. Being part of the core team that executed the company’s transformation — shifting from an on-premises backup company to a Cyber Protection SaaS company with over 21,000 MSP partners worldwide — has been an amazing journey.

Together, we completely reshaped the sales organization and successfully revamped our go-to-market (GTM) strategy. This experience not only provided me with invaluable expertise but also allowed me to grow alongside the company. Over 10 years, I advanced from an entry-level Support Engineer to Chief Sales Officer, reporting directly to the CEO and overseeing total company revenue.

How do you manage work-life balance, and what tips do you have for other women striving to achieve this balance?
Work-life balance isn’t something you magically achieve—it’s about making conscious choices every day. If something matters to you, don’t just hope you’ll find time for it—schedule it. If fitness is a priority, block it in your calendar like you would a key meeting. The same goes for family time, hobbies, or anything else that keeps you feeling your best.

Listening to your body is just as important. Waiting until you’re completely burned out to take a long holiday isn’t always the best approach. Sometimes, a well-timed three-day weekend can do more for your well-being than an overdue two-week break. Recognising when you need to step back—even briefly—can keep you performing at your best.

And of course, planning ahead is one of the simplest ways to reduce stress. When you push important tasks to the last minute, the pressure builds, and that tension doesn’t just stay at work—it follows you home. Being proactive doesn’t just make you more effective professionally; it also frees up the mental space to truly enjoy your personal life.

]]>
Nearly Half of Business Users Targeted by Email Attacks in H2 2024, Says Acronis https://securityreviewmag.com/?p=27776 Thu, 13 Feb 2025 12:10:14 +0000 https://securityreviewmag.com/?p=27776 Acronis has released its biannual report titled, “Acronis Cyberthreats Report, H2 2024: The rise of AI-driven threats”. This edition reveals a significant rise in email cyberattacks; a staggering 197% increase detected in H2 2024 compared to the same period in 2023, with a 21% rise in attacks per organization. From July to December 2024, nearly 50% of users were targeted by email-based attacks at least once, and nearly a third (31.4%) of all emails received in H2 2024 were spam, with 1.4% containing malware or phishing links.

Email attacks on managed service providers (MSPs) also increased. Not surprisingly, phishing was the preferred attack vector for attackers to breach MSP networks, with 33% experiencing email phishing campaigns. This was closely followed by exploits targeting vulnerabilities in Remote Desktop Protocol (RDP) and other remote access tools. This demonstrates how cybercriminals are leveraging common MSP practices to gain unauthorized access and deploy malicious payloads.

The report highlights a concerning emerging trend: MSPs are increasingly targeted by advanced persistent threat (APT)-linked ransomware groups, posing a significant and growing risk. These sophisticated actors employ espionage-style tactics, including stolen credentials, social engineering, and supply chain attacks, to infiltrate MSP networks and spread ransomware to client systems. This shift signals that MSPs are no longer opportunistic targets but have become strategic entry points for high-stakes cyberattacks.

Concerning for businesses in the UAE, the country was among the most targeted by malware attacks in December 2024. The Emirates also experienced the highest percentage of blocked malicious URLs in December (16.2%), followed by Brazil (13.2%) and Singapore (12.0%).

“The cyberthreats report from the Acronis Threat Research Unit serves as our biannual pulse on the cybersecurity landscape, offering critical insights into the latest attack trends and vulnerabilities,” said Gerald Beuchelt, CISO at Acronis. “This release highlights the alarming rise of AI-generated attacks and the increasing sophistication of ransomware campaigns. By analyzing trends from the first half of 2024 and providing actionable recommendations, the report empowers organizations, MSPs, and the cybersecurity industry to proactively strengthen their defenses to stay ahead of today’s most pressing risks.”

The report highlights another interesting trend: as remote monitoring and management (RMM) tools become more widely adopted for efficiency, they introduce significant risks to organizational security. Telemetry data from the report reveals that many organizations use multiple RMM tools simultaneously, creating blind spots that attackers can exploit. Without the proper controls, RMM tools can become entry points for ransomware attacks, which cybercriminals often use to cause even greater damage.

In addition to new data and analysis from the second half of 2024, the report provides a complete overview of the top vulnerabilities exploited in 2024 and predictions for 2025, alongside actionable recommendations to help organizations and MSPs strengthen their defenses against emerging threats. Authored by the Acronis Threat Research Unit (TRU), the Acronis H2 2024 Cyberthreats Report offers a comprehensive account of the global threat landscape as monitored by Acronis during the second half of 2024.

]]>
Acronis Appoints New CISO https://securityreviewmag.com/?p=27651 Mon, 13 Jan 2025 08:15:42 +0000 https://securityreviewmag.com/?p=27651 Acronis has appointed Gerald Beuchelt as its new Chief Information Security Officer (CISO). In this role, Beuchelt will lead the execution of Acronis’ global information security strategy, ensuring the protection of the company’s information, systems, and technologies while advancing Acronis’ goal to protect all data, applications, and systems.

As a key member of executive leadership responsible for security, Beuchelt will lead a global team of IT, security, and compliance professionals. Beuchelt will oversee corporate IT infrastructure, including help desk operations, server and network management, and more. Additionally, he will support the expansion of Acronis’ impact in the cybersecurity community through new research, reports, and threat intelligence from the Acronis Threat Research Unit (TRU).

“Acronis’ breadth of product capabilities, global impact, and strategic direction is truly exciting,” said Gerald Beuchelt. “I’m particularly inspired by the company’s dedication to making security solutions scalable and accessible for service providers, enterprises, SMBs, and individual users alike. My focus will be on maintaining and continuously improving our security posture to address the increasingly complex threat landscape. As part of Acronis TRU, we will implement research-driven guidance that will shape Acronis’ capabilities to protect against modern threats while raising awareness of how our solutions empower businesses to succeed. I look forward to collaborating with the talented team at Acronis to expand our influence in the cybersecurity community.”

Beuchelt brings over a decade of leadership experience in cybersecurity, including his most recent role as Chief Information Security Officer at Sprinklr Inc. and prior positions at LogMeIn. His extensive background also includes serving as Treasurer and Director on the board of the Boston Chapter of Infragard, the FBI public-private partnership program and the National Cyber Security Alliance, as well as roles as Chief Security Officer at Demandware, Inc. (acquired by Salesforce) and Principal Information Security Engineer at The MITRE Corporation.

“We are proud to welcome Gerald to Acronis as our new CISO,” said Ezequiel Steiner, CEO at Acronis. “His extensive experience and forward-thinking approach to cybersecurity will play a vital role in advancing our mission to protect all data, applications, and systems for organizations worldwide. As CISO, he will drive initiatives that ensure our customers and partners benefit from Acronis’ natively integrated solutions, which eliminate complexity and provide unmatched simplicity and performance.”

]]>
Middle East Companies Strengthen Cybersecurity with Essential Employee Training https://securityreviewmag.com/?p=27560 Tue, 17 Dec 2024 08:26:42 +0000 https://securityreviewmag.com/?p=27560 Over 155,000 vulnerable assets have been identified within the UAE, according to recent reports from the UAE Cybersecurity Council. This alarming figure reflects the growing cybersecurity risks in the Middle East, driven by geopolitical factors, increased migration, and the region’s expanding digital presence. In addition to these vulnerabilities, advanced threats like ransomware are rising. In 2024, Saudi Arabia reported 11 ransomware incidents in 2024, up from 10 in 2023, Lebanon saw an increase from 2 to 7 cases, and Oman reported 4. These incidents highlight the urgent need for comprehensive cybersecurity education.

Human error is a major contributor to cyberattacks, yet a recent PwC survey reveals that only 37% of organizations in the Middle East have implemented strong training and awareness programs for their employees. Acronis, a global leader in cybersecurity and data protection, has reported that partners who completed training and certification under the Acronis Academy program experienced higher revenue growth from product sales and fewer IT support requests from customers than non-certified partners. These findings are based on certification training data and sales metrics achieved by its partners.

Acronis launched the MSP Academy in 2023 to offer specialised MSP training, supporting the growing base of managed service providers. Data from their certification training revealed that partners who completed certification training saw an average 60% increase in revenue and a 40% reduction in incident resolution reports. “The Acronis MSP Academy modules cover essential areas including managed services, cybersecurity, and marketing, all of which are particularly relevant to the growing demands in the Middle East,” says Ziad Nasr, General Manager of Acronis Middle East, “By completing these courses, MSPs in the region can enhance their expertise in cybersecurity, deliver exceptional services to clients, and strengthen their reputation in a rapidly evolving market.”

In 2025, emerging cyber threats like deepfake technology and AI-generated phishing emails are expected to evolve, with attackers increasingly exploiting vulnerabilities as businesses and government agencies rely more on digital communication. Cybercriminals may impersonate executives or government officials using deepfake audio or video, making these attacks difficult to detect. These advanced threats are often beyond public awareness and can only be effectively identified if proper training and awareness programs are in place to help individuals recognize and defend against them.

]]>
Rising Cyber Threats Target UAE’s Financial Sector and Critical Infrastructure in 2025 https://securityreviewmag.com/?p=27453 Mon, 25 Nov 2024 08:24:37 +0000 https://securityreviewmag.com/?p=27453 The UAE has seen a sharp rise in cyber threats in 2024, particularly ransomware attacks, with 34 reported incidents between January and November, up from 27 in all of 2023, according to Acronis Threat Research Unit data. This increase reflects the nation’s prominence globally, making it a prime target for cybercriminals aiming to exploit vulnerabilities in finance, telecommunications, government, and critical infrastructure sectors. Additionally, as per the same report, Malware detections have also surged by 65.3%, jumping from 16.05% in 2023 to 26.52% in 2024.

Cybercriminals are increasingly using advanced malware and encryption techniques to attack financial institutions, targeting banks and financial services, and seeking to extort companies or sell stolen data on the dark web. With the cost of data breaches in the Middle East averaging $8.7 million, financial organizations in the UAE are under growing pressure to fortify their cybersecurity measures to protect sensitive data and avoid significant financial and reputational damage.

UAE’s critical infrastructure sectors, including energy, oil, and gas, are also facing heightened risks. Experts predict that cyberattacks on industrial control systems (ICS) and operational technology (OT) could severely disrupt production and lead to major financial losses. “The growing use of smart city technologies and the expansion of IoT in the UAE are increasing the digital attack surface,” said Ziad Nasr, General Manager of Acronis Middle East. “As more devices and systems become interconnected, cybercriminals have greater opportunities to exploit vulnerabilities, potentially essential services.”

The UAE’s strategic geopolitical position further elevates its vulnerability to cyber threats, particularly from nation-state actors. Advanced Persistent Threats (APTs), often targeting government and defence sectors, are expected to intensify in 2025. These groups deploy advanced tactics, such as spear-phishing, to breach critical systems. Furthermore, the UAE’s strategic geopolitical position makes it a prime target for nation-state actors deploying Advanced Persistent Threats (APTs). These groups often target government and defence sectors, using sophisticated tactics such as spear-phishing to infiltrate critical systems.

In comparison to its regional peers, the UAE leads the Middle East in reported cyber incidents. For example, Saudi Arabia recorded 11 ransomware attacks in 2024, Lebanon saw an increase from 2 to 7, Oman from 3 to 4, and Jordan experienced a decline from 3 to 1. This positions the UAE as the most affected in the region, facing a higher volume and more complex cyber threats than its neighbours.

Phishing attacks are expected to evolve in 2025, with the integration of AI and deepfake technology enabling attackers to convincingly impersonate executives. This will create significant risks through Business Email Compromise (BEC) schemes and other social engineering tactics. To combat these rising threats, Acronis urges organizations to adopt advanced cybersecurity solutions and strengthen their defences. This will be crucial for safeguarding the nation’s economic stability and boosting its resilience against the growing tide of cyber risks.

While the UAE may not rank among the top nations globally for cyberattack volume, its position as a regional target is clear. The sophistication and increasing frequency of attacks, augmented by AI, challenge the nation’s cybersecurity infrastructure. As the UAE moves toward becoming an ‘AI nation’, it faces both new opportunities and risks, making it essential to adopt comprehensive cybersecurity strategies and foster greater cooperation across sectors to mitigate evolving threats.

]]>
Is Artificial Intelligence a Boon or Bane for Cybersecurity? https://securityreviewmag.com/?p=27058 Mon, 19 Aug 2024 14:31:00 +0000 https://securityreviewmag.com/?p=27058 Written by Sergey Belov, Head of Internal Security at Acronis

AI stands at the forefront of innovations in online safety in 2024, transforming how organisations detect, analyse and respond to threats. Businesses across the Middle East are increasingly investing in AI, recognising its potential to enhance operations and safeguard digital assets through advanced security and data protection measures. By leveraging AI’s processing power, companies can bolster their defences, preemptively addressing threats before they escalate. However, while Artificial Intelligence offers significant benefits to businesses worldwide, its adoption also escalates the risk of potential attacks and security vulnerabilities.

Here are some ways Artificial Intelligence acts for and against cybersecurity:

Artificial Intelligence for Cybersecurity
Studies show that 91% of the businesses in UAE have employed AI in their cyber safety strategies to address the increase in threats today.

  • Threat detection and response: AI-enhanced security solutions utilise machine learning algorithms to analyse extensive data sets from various origins, aiding IT professionals in identifying and addressing cyber threats promptly.
  • Behavioural analysis: Tools powered by AI for behavioural analysis monitor the actions of users and systems to detect anomalies that may signal potential security risks.
  • Predictive analytics: AI and machine learning algorithms analyse past data to forecast future cyber protection trends and anticipate emerging threats.
  • Automation of routine tasks: AI-driven automation technologies streamline everyday safety operations, including threat detection, incident response, and vulnerability management, allowing security teams to concentrate more on strategic activities.

Artificial Intelligence Against Cybersecurity
As technology advances, so do the threats against it. In the Middle East, the cyber threat landscape is evolving rapidly, with targeted ransomware attacks, supply chain vulnerabilities and advanced phishing methods on the rise.

Recent data shows a 29.1% increase in malware detection and a 25.5% rise in blocked URLs, emphasising the urgency for robust security measures. To address these challenges it is important to be aware of the threats that reside in new technologies and identify the best plan of action against them.

  • Bias and discrimination: AI algorithms are susceptible to bias and discrimination, potentially leading to inaccurate decisions and unintended consequences. To mitigate these risks, organisations must ensure AI-driven cybersecurity systems are trained on diverse and representative datasets, thereby minimising bias and mitigating ethical and legal concerns.
  • False positives and negatives: AI-driven security systems may produce false positives (incorrectly identifying benign activities as malicious) or false negatives (failing to detect genuine security threats), resulting in either unnecessary alerts or missed opportunities leading to unnecessary alerts or missed opportunities to prevent security incidents.
  • Adversarial attacks: AI systems can be vulnerable to adversarial attacks, where malicious actors manipulate input data to evade detection by AI algorithms. Adversarial training and anomaly detection techniques can reduce these risks and ensure the resilience of systems depending on Artificial Intelligence.

Moreover, AI not only enhances threat detection but also empowers cybercriminals to execute sophisticated attacks. 73% of organisations in the UAE have experienced ransomware attacks in the past two years, underscoring the critical need for heightened vigilance.

Addressing the Challenges
To truly reap the benefits of emerging technology, companies must adopt a comprehensive approach to address the risks posed by them. This involves investing in AI-driven threat detection and prevention tools, employing advanced AI security measures, and continuously updating and refining their cyber protection strategies. Moreover, organisations should conduct regular training, attack simulations and awareness programs for their employees to stay prepared for the malicious usage of AI. Examples of malicious use of AI targeting employees include several concerning scenarios:

  1. Deepfakes: Deepfake techniques can be employed by attackers with minimal technical expertise. These can be created using software that is easily accessible through a simple Google search. Such deepfakes could be used to impersonate company executives in video calls, tricking employees into disclosing sensitive information or authorising fraudulent transactions.
  2. Phishing Scams: AI can be used to generate highly personalised phishing emails. By analysing publicly available data, AI can craft emails that appear to come from a trusted source within the company, making employees more likely to click on malicious links or download harmful attachments.
  3. Voice Spoofing: Similar to deepfakes, AI can be used to create realistic voice simulations. Attackers can use these to call employees, pretend to be someone they trust and manipulate them into revealing confidential information or performing certain actions that compromise security.
  4. Automated Social Engineering: AI can automate social engineering attacks by scraping social media and other online platforms to gather detailed profiles of employees. This information can then be used to craft convincing fake scenarios, gaining employees’ trust and leading them to inadvertently share sensitive company information.
  5. Fake News and Disinformation: AI-generated fake news or misinformation can be targeted at employees to influence their decisions or create unrest within the company. For example, spreading false rumours about company layoffs or financial instability can cause panic and disrupt normal operations.

These examples illustrate how easily accessible AI tools can be exploited by attackers to target employees and compromise organisational security. Companies must educate their employees about these threats and implement robust security measures to mitigate such risks. In addition to in-house security measures, companies should consider leveraging third-party security solutions to enhance the level of security, especially for addressing threats that are beyond their capabilities.

As we venture into the uncharted territories of Artificial intelligence, the potential of this technology is limitless. While we uncover new possibilities and leverage their benefits to enhance and protect our organisations, vigilance is crucial against its potential drawbacks. Finding the right balance and developing effective strategies is paramount in the ever-evolving landscape of security.

]]>
UAE Under Siege from Cybercriminals Amid Global Email Attack Surge https://securityreviewmag.com/?p=26996 Tue, 30 Jul 2024 14:05:47 +0000 https://securityreviewmag.com/?p=26996 Acronis has shared new research findings from the first half of 2024 in its biannual cyber threats report by Acronis Threat Research Unit. Titled, “Acronis Cyberthreats Report H1 2024: Email attacks surge 293%, new ransomware groups emerge,” the report leverages over one million unique Windows endpoints from 15 key countries around the world to bring awareness to global trends in the cybersecurity industry. Most notably, the report found that email attacks have seen a 293% surge when compared to the same period in 2023.

The UAE witnessed a notable increase in malware detections with an 11.7% increase from January to May 2024. While the region is facing considerable cybersecurity challenges, these are part of a broader trend affecting many EMEA countries, particularly in terms of rising malware detections and high-profile ransomware attacks. Compared to other EMEA countries, the situation in MENA mirrors broader regional challenges. Bahrain had the highest malware detection rate at 63.2% in April 2024, followed by Egypt with 42.6% of organizations experiencing detections in the same month.

“The insights from Acronis’ H1 2024 Cyberthreats Report highlight the urgent need for heightened vigilance and advanced protective measures,” remarked Ziad Nasr, General Manager for the Middle East at Acronis. “The UAE has been identified as a ‘prime target’ for ransomware attacks, as cautioned by the country’s Cyber Security Council. In 2023, the average cost of a data breach in the Middle East exceeded $8 million.”

“MSPs are particularly vulnerable, facing persistent threats such as phishing, social engineering, and supply chain attacks,” Ziad continued. “Acronis encourages MSPs to adopt comprehensive security strategies, incorporating security awareness training, and leveraging advanced endpoint protection solutions like XDR and multi-factor authentication. Our commitment to delivering actionable insights through the Cyberthreats Report aims to empower organizations and enhance global cybersecurity resilience.”

Ransomware continues to be a major threat to small and medium-sized businesses (SMBs), particularly in critical industries such as government and healthcare. In Q1 2024, Acronis observed 10 new ransomware groups who together claimed 84 cyberattacks globally. Among the top 10 most active ransomware families detected during this time, three highly active groups stand out as the primary contributors, collectively responsible for 35% of the attacks: LockBit, Black Basta, and PLAY. The number of ransomware detections was also on the rise, increasing 32% from Q4 2023 to Q1 2024.

In support of Acronis’ mission to tailor business initiatives to Managed Service Providers (MSPs), the report is observant of how MSPs are being targeted and compromised. Of note, attack vectors including phishing and social engineering, vulnerability exploits, credential compromises and supply chain attacks were highlighted as the most successful techniques used to breach MSPs’ cybersecurity defences.

“As a result of the increasing volume and complexities of cyber threats we continue to uncover in the current cybersecurity landscape, it is of the utmost importance that MSPs take a holistic approach to securing their customer’s data, systems, and unique digital infrastructures,” said Irina Artioli, report author and Cyber Protection Evangelist at Acronis Threat Research Unit. “To do this effectively, we recommend MSPs adopt a comprehensive security strategy, including mandating security awareness training and incident response planning, as well as deploying advanced endpoint protection solutions like extended detection and response (XDR), multi-factor authentication, and more.”

Additionally, the report focuses on emerging cybersecurity trends, highlighting the increasing use of generative artificial intelligence (AI) and large language models (LLMs) by threat groups. Specifically, it underscores the growing prevalence of AI being leveraged in social engineering and automation attacks. The most common AI-generated attacks that were detected include malicious emails, deepfake business email compromise (BEC), deepfake extortions, KYC bypass, and script and malware generation. Furthermore, Acronis researchers have identified two types of AI threats. The first involves AI-generated threats, in which malware is created using AI techniques but does not utilize AI in its operations. The second is AI-enabled malware, which incorporates AI into its functionality.

Other key findings from the report include:

Middle East Threat Landscape & Trends:

  • UAE’s monthly percentages of global detections remained relatively lower compared to high-risk countries like Germany, France, and Egypt, highlighting a growing but still manageable cyber threat landscape.
  • The UAE had varying monthly percentages of global detections ranging from 0.8% to 1.9% throughout the first half of 2024. In comparison, Germany’s percentages ranged from 6.4% to 9.9%, France’s ranged from 3.6% to 5.5%, and the United Kingdom’s ranged from 4.3% to 6.1%.
  • The UAE experienced a significant rise in the percentage of clients with malware detections. 17.6% of clients with malware detections in January 2024, 18.8% in February, 29.1% in March, and 29.3% in April and May. The sharp increase in malware detections among UAE clients, reflects a concerning trend of escalating cyber threats, emphasizing the urgent need for enhanced cybersecurity measures.
  • Other EMEA countries like Bahrain and Egypt also showed high malware detection rates, indicating a broader regional challenge
  • The ransomware attack on Seven Seas Technologies in the UAE highlights the region’s vulnerability to such threats, similar to high-profile cases in other EMEA countries
  • The emergence of various ransomware groups targeting different sectors across the EMEA region indicates a widespread and diversified threat landscape

Global Threat Landscape:

  • Bahrain, Egypt, and South Korea were the top countries targeted by malware attacks in Q1 2024.
  • 28 million URLs were blocked at the endpoint in Q1 2024.
  • 27.6 % of all received emails were spam and 1.5% contained malware or phishing links.
  • The average lifespan of a malware sample in the wild is 2.3 days.
  • 1,048 cases of ransomware were publicly reported in Q1 2024, a 23% increase over Q1 2023.

Cybersecurity Trends in H1 2024:

  • Ransomware continues to be a major threat to SMBs, and ransomware groups have abused vulnerable drivers to get a foothold in systems and disable security tools.
  • In the first quarter of 2024, PowerShell was the most frequently detected MITRE technique.
  • The number of email attacks detected in H1 2024 surged by 293% compared to the first half of 2023.

Ransomware Trends:

  • In Q1 2024, Acronis researchers observed 10 new ransomware groups that together claimed 84 cyberattacks globally.
  • The number of ransomware detections increased 32% from Q4 2023 to Q1 2024.

Attacks on MSPs:

  • MSPs were under consistent attack from January to May 2024, with data revealing email phishing campaigns were the most used by attackers.
  • The top five most frequently discovered MITRE ATT&CK techniques in the first half of the year included PowerShell, Windows Management Instrumentation, Process Injection, Data Manipulation and Account Discovery.

Phishing and email attacks:

  • Organizations experienced a surge in email communications, with the number of emails per organization increasing by 25%.
  • The rise in email volume coincided with a 47% increase in email attacks targeting organizations.
  • 26% of users encountered phishing attempts through malicious URLs.
  • Social engineering increased by 5% since H1 2023; however, malware attacks decreased from 11% in H1 2023 to 4% in H1 2024.

Leveraging AI:

  • Cybercriminals continue to leverage malicious AI tools like WormGPT and FraudGPT.
  • While AI can assist attackers at every stage of the cyberattack kill chain, it can also be used as a defence mechanism as it allows for around-the-clock detection of attacks and reports them to experts to take appropriate response actions to ensure smooth business continuity.

The Acronis H1 2024 Cyberthreats Report is curated by the Acronis Threat Research Unit and includes data surrounding ransomware threats, phishing, malicious websites and software vulnerabilities, and tips on how to protect against the aforementioned threats. Released bi-annually, the Acronis Cyberthreats Report sets the industry standard by consistently establishing itself as a benchmark for cybersecurity intelligence. Acronis’ analysis of the current cyber threat landscape is published for the benefit of its users, partners, and the broader, global cybersecurity community to help them stay abreast of ongoing cybersecurity developments.

]]>
Acronis Launches MSP Academy https://securityreviewmag.com/?p=26160 Wed, 08 Nov 2023 11:18:41 +0000 https://securityreviewmag.com/?p=26160 Acronis has launched its MSP Academy, an educational initiative aimed at providing managed service providers (MSPs) with business and technological knowledge, skills, and tools necessary to excel and grow. The MSP Academy launch represents a significant expansion of Acronis’ educational offerings, delivering on the commitment of Acronis to support the development of the global MSP market.

Acronis has offered extensive technology and business training on Acronis products for service providers for over ten years through Acronis Academy. Acronis partners that went through training and certification through the Academy in 2022 saw a 60% increase in revenue from Acronis product sales and a reduction in support incidents by 40%. In response to partner requests to expand the training portfolio beyond product training, Acronis delivered MSP Academy.

MSP Academy is a learning platform created to address key challenges MSPs face. It covers various topics, from starting an MSP, running a successful MSP business, marketing an MSP business, and optimizing the efficiency and productivity of MSP technicians. “MSP Academy offers a customized education experience, allowing learners to explore specific topics or follow a structured learning path,” said Jon McCarrick, Director of Evangelism at Acronis. “The rapidly evolving technology and business landscape requires ongoing learning, and MSP Academy is designed to support the growing needs of MSPs.”

MSP Academy’s curriculum is crafted to offer training covering all aspects of managing an MSP business. With content structured to cater to the fast-paced changes of technology, bite-sized modules ranging from three to seven minutes are available to deliver impactful insights. Participants can take an exam to receive a Credly badge to share with peers and customers, showing their qualifications and commitment to continuous learning by earning a degree from the MSP Academy.

Upcoming initiatives from Acronis include delivering hybrid boot camps in collaboration with cloud distributors, providing an immersive learning experience to keep learners at the forefront of industry advancements, and launching new online, hybrid, and offline multilingual training options, ensuring that MSPs across the world can benefit from the program.

]]>
#GITEXGlobal2023 – Interview with James Slaby of Acronis https://securityreviewmag.com/?p=26099 Thu, 26 Oct 2023 15:10:27 +0000 https://securityreviewmag.com/?p=26099 We caught up with James Slaby, the Director of Cyber Protection at Acronis. He spoke about his company’s presence at GITEX and his expectations from the event:

Download the Arabian Reseller GITEX 2023 Special Edition: https://arabianreseller.com/oct2023

If you liked the video, please like, share, and comment below.

Follow us on social media:
✓ Linkedin – https://www.linkedin.com/company/28160369/
✓ Twitter – https://twitter.com/arabianreseller
✓ Facebook – https://www.facebook.com/arabianreseller
✓ Website – http://www.arabianreseller.com/
✓ Future Tech Podcast – https://open.spotify.com/show/6ZT8KdXdzlmRaaRNQeZei8

For more videos, please subscribe to our channel. Also, hit the bell icon to join our Notification Squad!

]]>
Acronis to Mark its Commitment to AI-Driven Cybersecurity at GITEX https://securityreviewmag.com/?p=26039 Wed, 11 Oct 2023 06:41:10 +0000 https://securityreviewmag.com/?p=26039 Ziad Nasr, the General Manager for the Middle East at Acronis, speaks about his company’s participation at GITEX this year

Tell us about your participation at GITEX 2023.
We have been participating at GITEX for 9 years (since the year 2014). This year’s participation is marked by our heightened commitment to AI-driven cybersecurity. Unlike previous years, we are unveiling a new level of innovation, with AI at the forefront of our offerings. Our solutions have evolved significantly, offering enhanced AI-driven threat detection, response, and protection. We are also expanding our ecosystem of partnerships to provide a more comprehensive cybersecurity platform for organizations. In essence, we are taking a quantum leap in delivering cutting-edge cyber protection.

What are your expectations from GITEX this year?
We have several key milestones that we’re eagerly anticipating to achieve by the conclusion of GITEX 2023. These milestones include:

  • Successful Product Launch: We aim to successfully launch the enhanced Acronis Cyber Protect suite and gather valuable feedback from industry experts and potential customers.
  • Strategic Partnerships: Establishing strategic partnerships with leading companies in the cybersecurity and technology sectors to enhance our market reach and product integration.
  • Extensive Engagement: Engaging with a substantial number of attendees to create awareness and generate interest in our innovative AI-driven cybersecurity solutions.

We believe that GITEX offers a unique platform to network with industry peers, enhance brand visibility, showcase innovation, and gain valuable market insights, positioning us as industry leaders and enabling us to stay ahead in a competitive landscape.

What will be your theme of participation this year?
We are dedicating this year to the theme of “Empowering Cyber Resilience with AI,” and our innovation centres around enhancing cybersecurity and data protection. We will be unveiling the latest version of our Acronis Cyber Protect suite, which is designed to effectively combat AI-powered threats. In addition to this, we’ll introduce our next-generation cloud-based solutions and announce a significant partnership that will strengthen our offerings. Our primary focus is on showcasing the seamless integration of AI into our products, empowering proactive threat detection, and providing comprehensive data protection solutions.

What is your channel strategy for the MEA market?
Our channel strategy is designed to empower our partners and expand their cloud services portfolio. We offer the flexible Acronis Cyber Protect Cloud platform, featuring integrated cybersecurity and data protection services. This empowers our partners to provide comprehensive protection to their customers, fostering cross-selling opportunities that add value and increase profitability.

We have cultivated a robust Partner Program that rewards focus and compliance while channelling financial, technical, and human resources into our partners’ growth. Our goal is to serve as an external business development unit for our partners, equipping them with tools, content, and channel analytics, and leveraging our extensive experience and internal knowledge gained from collaborating with partners worldwide.

]]>