Expert Speak
Four Reasons to Migrate to an Open Architecture Access Control System
Written by Wissam Acra, Regional Sales Manager at Genetec
In the recent decade, the access control market has changed dramatically. Previously, archaic access control systems (ACS) with proprietary hardware confined companies to single manufacturers and stagnant solutions. It is now more open, and the introduction of new technologies has offered businesses more options when selecting systems and components. As a result of the expanded variety, they can better address their individual needs because they can do more with their ACS.
However, while many firms have completed the leap, several are still using obsolete ACS technology because upgrading is too tricky. They’re terrified of the expenses of migration, so they put their effort and money into preserving their outdated systems instead. One of the key factors driving their concern is the way they look at upgrading. However, some organizations see investing in a new ACS as a capital expense rather than a straightforward return on investment (ROI).
According to Frost & Sullivan, the Middle East commercial security market was expected to reach US$10.2 billion by 2020, growing annually by 24 percent in value since 2015. This means that despite the growing importance of physical security solutions in the region, companies still approach their ACS as a capital expense and cannot see any options beyond simple system maintenance.
While many companies have transitioned, others are still utilizing outdated ACS technology because upgrading is too complex. They’re afraid of the costs of migration, so they devote their time and resources on keeping their antiquated systems.
Protect your business
A unified ACS can do more than lock and unlock doors. It can protect an organization’s people and assets more effectively and can help improve business operations and decision-making capabilities. By tracking key indicators and information, dashboards put events into perspective.
For example, designing a dashboard that tracks active alarms alongside other metrics, including the number of patrons waiting in a security line, can warn security operators of escalating situations. This helps organizations identify potential issues before they become problems and make better decisions aimed at improving every area of operations.
The real cost of legacy systems
Legacy systems were designed to address an organization’s needs at a specific point in time. As needs change and technology advances, they can lag. For example, some legacy systems limit an organization’s ability to integrate new technologies into its physical security system, including wireless locks and mobile credentials. One of the main post-pandemic concerns of physical security professionals in the EMEA is aging infrastructure, as 48% of the EMEA State of Physical Security 2021 survey respondents believe it is a significant hurdle.
An older ACS can also require constant upgrading and support to keep working. Parts for these older systems can be challenging to find and are frequently costly. And, when an ACS is proprietary and heavily integrated into a physical security system, this can further increase maintenance costs.
Increasing ROI by going beyond the door
To avoid the long-term setbacks associated with closed systems, organizations need an ACS that will evolve with their ever-changing needs, provide solutions that go beyond the door, and allow them to move to the cloud with confidence. With a flexible, open ACS, organizations can address current requirements and evolve their systems with new technologies as their needs change.
An open ACS provides the ability to scale up through additional hardware integrations, bolt-on software modules, and open software integrations with third-party products. These solutions allow organizations to customize their systems by selecting hardware that addresses their specific security objectives. It can also save time and money by enabling them to reuse existing hardware instead of migrating to an entirely new system.
They also provide a global view of environments by correlating data, enabling security teams to assess and respond to incidents quickly and effectively.
Legacy systems are no match for today’s cybercriminal
With the average cost of a data breach in the UAE and KSA rising to over $5 million, it’s never been more critical for organizations to be educated on the risks associated with legacy systems and the advantages that a new cyber-secure access solution can offer. Access Control Systems (ACS) are a powerful infrastructure tool that tends to be overlooked as a potential cyber-attack vector. As access control systems tend to be connected to an organization’s network, if a cybercriminal breaches a legacy ACS, they can open and close doors without permission and gain control over any other system connected to the network.
Threat actors often move around a breached network to search for information that will generate the most financial gain. By compromising a single user’s active directory account, a cybercriminal can disguise the funds they steal, making it virtually impossible for cybersecurity solutions to find them. According to the EMEA State of Physical Security 2021 survey, 67% of respondents set out to prioritize improving their cybersecurity strategy. To protect their data and networks, organizations need an ACS that is secure from server to the credential.
Conclusion
Keeping a legacy ACS is time-consuming and costly. It can expose a company to new hazards, such as cyberattacks, and it cannot keep up with changing access control requirements. Open access control solutions make modernising simple. An open architecture solution’s flexibility allows enterprises to scale their ACS as their needs evolve. This enables them to improve security while generating a higher return on investment continuously.
Artificial Intelligence
How AI is Reinventing Cybersecurity for the Automotive Industry
Written by Alain Penel, VP of Middle East, CIS & Turkey at Fortinet (more…)
Cyber Security
Positive Technologies Study Reveals Successful Cyberattacks Nett 5X Profits
Positive Technologies has released a study on the dark web market, analysing prices for illegal cybersecurity services and products, as well as the costs incurred by cybercriminals to carry out attacks. The most expensive type of malware is ransomware, with a median cost of $7,500. Zero-day exploits are particularly valuable, often being sold for millions of dollars. However, the net profit from a successful cyberattack can be five times the cost of organizing it.
Experts estimate that performing a popular phishing attack involving ransomware costs novice cybercriminals at least $20,000. First, hackers rent dedicated servers, subscribe to VPN services, and acquire other tools to build a secure and anonymous IT infrastructure to manage the attack. Attackers also need to acquire the source code of malicious software or subscribe to ready-to-use malware, as well as tools for infiltrating the victim’s system and evading detection by security measures. Moreover, cybercriminals can consult with seasoned experts, purchase access to targeted infrastructures and company data, and escalate privileges within a compromised system. Products and tools are readily available for purchase on the dark web, catering to beginners. The darknet also offers leaked malware along with detailed instructions, making it easier for novice cybercriminals to carry out attacks.
Malware is one of the primary tools in a hacker’s arsenal, with 53% of malware-related ads focused on sales. In 19% of all posts, infostealers designed to steal data are offered. Crypters and code obfuscation tools, used to help attackers hide malware from security tools, are featured in 17% of cases. Additionally, loaders are mentioned in 16% of ads. The median cost of these types of malware stands at $400, $70, and $500, respectively. The most expensive malware is ransomware: its median cost is $7,500, with some offers reaching up to $320,000. Ransomware is primarily distributed through affiliate programs, known as Ransomware-as-a-Service (RaaS), where participants in an attack typically receive 70–90% of the ransom. To become a partner, a criminal must make a contribution of 0.05 Bitcoin (approximately $5,000) and have a solid reputation on the dark web.
Another popular attack tool is exploits: 69% of exploit-related ads focus on sales, with zero-day vulnerability posts accounting for 32% of them. In 31% of cases, the cost of exploits exceeds $20,000 and can reach several million dollars. Access to corporate networks is relatively inexpensive, with 72% of such ads focused on sales, and 62% of them priced at under a thousand dollars. Among cybercriminal services, hacks are the most popular option, accounting for 49% of reports. For example, the price for compromising a personal email account starts at $100, while the cost for a corporate account begins at $200.
Dmitry Streltsov, Threat Analyst at Positive Technologies, says, “On dark web marketplaces, prices are typically determined in one of two ways: either sellers set a fixed price, or auctions are held. Auctions are often used for exclusive items, such as zero-day exploits. The platforms facilitating these deals also generate revenue, often through their own escrow services, which hold the buyer’s funds temporarily until the product or service is confirmed as delivered. On many platforms, these escrow services are managed by either administrators or trusted users with strong reputations. In return, they earn at least 4% of the transaction amount, with the forums setting the rates.”
Considering the cost of tools and services on the dark web, along with the median ransom amount, cybercriminals can achieve a net profit of $100,000–$130,000 from a successful attack—five times the cost of their preparation. For a company, such an incident can result not only in ransom costs but also in massive financial losses due to disrupted business processes. For example, in 2024, due to a ransomware attack, servers of CDK Global were down for two weeks. The company paid cybercriminals $25 million, while the financial losses of dealers due to system downtime exceeded $600 million.
Expert Speak
What the Bybit Hack Reveals About the Future of Crypto Security
Written by Oded Vanunu, Chief Technologist & Head of Product Vulnerability Research at Check Point (more…)
-
GISEC1 week agoPositive Technologies @ GISEC Global 2025: Demonstrating Cutting-Edge Cyber Threats and AI Defense Strategies
-
Cyber Security1 week agoAxis Communications Sheds Light on Video Surveillance Industry Perspectives on AI
-
GISEC1 week agoVideo: SANS Institute Weighs in on Deepfakes, Model Poisoning and Risk Frameworks at GISEC Global 2025
-
GISEC1 week agoManageEngine @ GISEC Global 2025: AI, Quantum Computing, and Ransomware Form Part of Cybersecurity Outlook for 2025
-
GISEC1 week agoVideo: SentinelOne Speaks Hyperautomation, Purple AI, and the Future of Threat Detection at GISEC Global 2025
-
Africa Focus6 days agoCyberKnight Sets Up South Africa Entity
-
GISEC1 week agoGroup-IB @ GISEC Global 2025: Tackling Evolving Cyber Threats with Localised Intelligence and AI
-
GISEC1 week agoVideo: CyberKnight on Zero Trust, AI, and Saudi Arabia’s Digital Transformation at GISEC Global 2025
