CodeRED – Oct–Nov Edition 2025

6

08 - Anticipate, Not React: UAE Advances Post-Quantum Security

18 - 10 Trends Driving UAE Cybersecurity Strategy in 2026

10 - The Real Threat is not Downtime, it is Doubt

24 - The Future of BFSI Cybersecurity

16 - Technology alone Cannot Stop Cyber Attacks

26 - Intersec 2026 Sets the Stage for Transformation

Oct-Nov 2025

www.techxmedia.com

30 - Ai Has Arrived. is Governance Ready?

42 - Deepfakes: The Next Human Vulnerability for Businesses?

36 - Community Templates Make Threat Modelling Real

44 - Ai Attacks Rise, Tenable Fires Back

40 - Cybersecurity has to Move from Tool to Core Business Function

52 - Autonomous Security in Action

www.techxmedia.com

Oct-Nov 2025

7

UAE SPOTLIGHT

DR. MOHAMED

AL-KUWAITI Head of Cyber Security UAE Government

8

Oct-Nov 2025

www.techxmedia.com

ANTICIPATE, NOT REACT: UAE ADVANCES POST-QUANTUM SECURITY The UAE Cybersecurity Council announced a major advancement in national post-quantum readiness at CyberQ 2025, which took place in Abu Dhabi on November 26 and 27.

The Council confirmed that this progress comes as a result of expanding its collaboration with QuantumGate, the ATRCbacked company with a focus on quantum-safe security.

The Council stressed that this next phase marks the UAE’s shift from planning to large-scale implementation, accelerating the country’s preparedness for future quantum decryption threats across critical sectors.

The Cybersecurity Council and QuantumGate, a subsidiary of VentureOne, will deepen national preparedness by accelerating the UAE’s transition toward quantum-safe security. Joint efforts will focus on strengthening the country’s ability to anticipate and mitigate risks posed by future quantum decryption capabilities, advancing readiness across priority sectors, and enabling early, methodical steps toward large-scale cryptographic migration. With this shift from strategy to coordinated national implementation, the UAE stands among the first countries globally to operationalize a comprehensive post-quantum strategy.

The next phase of collaboration will focus on translating national strategy into practical, system-wide readiness across three key programs: the National Information Assurance Programme, the National Cybersecurity Index Platform, and the National Post-Quantum Migration Programme.

Through the National Information Assurance Programme, the Cybersecurity Council and QuantumGate will strengthen baseline security requirements and improve resilience across public and private sector organisations. Via the National Cybersecurity Index Platform, they will enhance nationallevel measurement, visibility, and readiness tracking.

Under the National Post-Quantum Migration Programme, the partnership will help identify vulnerable cryptographic assets, prioritize migration pathways, and guide entities with long-term data protection needs. By establishing clear baselines, sector wide guidance, and early migration roadmaps, the UAE is moving decisively beyond awareness into actionable, nationwide preparedness - positioning itself among the first nations to implement a coordinated national model for post-quantum security.

Dr. Mohamed Al-Kuwaiti, Head of Cyber Security for the UAE Government, said, "Our approach is clear: anticipate, not react. With QuantumGate’s advanced capabilities supporting

www.techxmedia.com

our national efforts, the UAE is building quantum-safe defenses today to ensure our critical infrastructure remains secure the moment quantum decryption becomes possible."

The partnership will also integrate a broader suite of QuantumGate technologies into national initiatives. These include the Crypto Discovery Tool (CDT), which gives entities full visibility of cryptographic assets across large and complex environments; QSphere, a quantum-resilient VPN and data security suite designed to protect sensitive information; and Salina and Secure VMI, which extend the collaboration beyond post-quantum protection into wider enterprise and government cybersecurity needs.

From strategy to implementation, the UAE leads globally by operationalizing quantum-safe cybersecurity at national scale.

Dr. Najwa Aaraj, CEO of QuantumGate, commented, "Our work with the Cybersecurity Council has matured from foundational research into full-scale deployment. TII’s advanced cryptography and QuantumGate’s security platforms are now being implemented across national infrastructures, ensuring the UAE is protected against emerging quantum-era vulnerabilities."

This long-term collaboration reinforces the UAE’s position as a regional and global leader in post-quantum cybersecurity and highlights the importance of close alignment between government and national technology providers in building a secure digital foundation for the future.

Through coordinated implementation and advancing quantum-safe readiness at scale, the Cybersecurity Council and QuantumGate are jointly strengthening the nation’s ability to safeguard sensitive information and enhance overall national resilience.

Oct-Nov 2025

9

COVER STORY

THE REAL THREAT

THE REAL THREAT

IS NOT DOWNTIME, IT IS DOUBT

When a cyber attack shuts down a system, the instinctive public reaction has traditionally been predictable: wait for a fix, assume service will be restored within a few hours, then move on. That was the familiar rhythm of outages. But in 2025, a subtle yet profound shift is redefining that pattern.

Today, people are no longer merely asking when systems will come back online. They are asking whether they can ever trust those systems again.

Downtime has always been considered a technical problem.

Engineers work to patch systems, restore functionality, and ensure operations resume. But trust erosion operates on a different plane. Unlike outages, which are temporary and tangible, the loss of confidence is intangible, lasting, and

10

Oct-Nov 2025

far more costly. In the evolving cyber landscape, attacks that destabilize critical infrastructure no longer stop at operational disruption; they now undermine the confidence on which modern life depends.

The first half of 2025 has already produced a string of high-profile events that reveal how fragile that confidence can be. While Europe has been the epicenter of these incidents, the lessons they offer are globally relevant.

For regions like the Middle East, rapidly developing digital infrastructures are particularly vulnerable to similar ripple effects if trust is not actively nurtured alongside technological progress.

www.techxmedia.com

CRACKS IN THE SKY: EUROPE’S AIRPORT DISRUPTION

One of the most striking examples of the new threat to public confidence occurred in September 2025, when multiple major European airports, including Heathrow, Brussels, Berlin, and Dublin, faced severe operational disruption.

The cause was a cyber attack targeting Collins Aerospace’s MUSE check-in and boarding system, a platform widely used across European airports.

The attack led to immediate failure of automated check-in kiosks, baggage tagging systems, and boarding processes.

Staff were forced to revert to manual procedures: handwritten boarding passes, manually printed bag tags, and long queues forming at ticket counters. Flights were delayed, schedules disrupted, and passengers faced uncertainty about the status of their journeys for days.

Collins Aerospace, a unit of RTX, confirmed that the disruption was cyber-related, emphasizing that flight safety and air traffic control were unaffected. Analysts, however, saw the event as more than an isolated technical fault. It represented a type of supply-chain attack, exploiting a shared platform to maximize impact across multiple stakeholders simultaneously.

For travelers, the disruption was frustrating, but it also seeded unease. If an airport’s check-in system can be compromised so extensively, what does that say about the vulnerability of other systems we rely on daily, energy grids, transportation networks, banking platforms, or government services?

For the first time, operational inconvenience morphed into an existential question: can the systems we trust to run modern life be trusted at all?

WHEN CYBER BECOMES PHYSICAL: THE NORWEGIAN DAM INCIDENT

The erosion of trust is not confined to digital interfaces.

In April 2025, a dam in Bremanger, Norway, was the target of a cyber-physical attack, illustrating the increasingly blurred line between digital vulnerabilities and real-world consequences.

Authorities confirmed that hackers gained remote access to one of the dam’s valves, increasing water flow to roughly 497 liters per second above the minimum for four hours. While no casualties occurred, the symbolic impact was significant. According to Beate Gangås, chief of the Norwegian Police Security Service (PST), the attack seemed designed to demonstrate capability, intimidate the public, and foster uncertainty.

www.techxmedia.com

A video showing the control panel, posted on Telegram and watermarked with the hacker group’s name, made the psychological effect explicit.

Unlike a simple data breach or service outage, this was a direct manipulation of physical infrastructure. It revealed that digital attacks can extend beyond financial theft or system downtime to threaten tangible, real-world systems that people assume are secure. The lesson is stark: when infrastructure can be tampered with remotely, it undermines public confidence not just in the system, but in the authority and institutions that operate it.

WHY THESE INCIDENTS SPREAD DOUBT

The airport and dam events, while distinct in their technical characteristics, share a common consequence: they erode public confidence. Operational disruption is temporary; doubt lingers. Understanding why this happens requires looking beyond technical risk to social and psychological dimensions.

FAILURES ARE VISIBLE AND FELT

When a dam’s water flow is altered or check-in kiosks go offline, the consequences are immediate and tangible.

Unlike abstract cyber risks, these failures touch people directly. Delays, confusion, and a sense of helplessness create emotional resonance that technical fixes alone cannot address.

SHARED PLATFORMS CREATE SHARED RISK

The airport incident highlighted systemic vulnerability.

When multiple airports rely on a single vendor platform, a compromise at one location can cascade across many.

Shared platforms introduce shared fragility. In a hyperconnected world, trust is inherently collective; when one node is breached, confidence in the entire network falters.

BLUR LINES BETWEEN DIGITAL AND PHYSICAL

The Norwegian dam attack demonstrated that cyber threats are no longer confined to servers or networks.

Physical infrastructure, water, energy, and transport, is now within the reach of digital manipulation. The implications for public perception are profound: people do not just fear service interruption, they fear that the systems themselves can be controlled by outsiders.

ATTACKERS AIM FOR PSYCHOLOGICAL IMPACT

Modern cyberattacks are rarely accidental. They are often designed to provoke anxiety. Visible signs of tampering,

Oct-Nov 2025

11

COVER STORY

THE REAL THREAT

such as hacked control panels or paralyzed airport systems, amplify fear. Citizens are left wondering: Who is behind this? Could it happen here? Will it happen again?

GLOBAL ECHOES FUEL LOCAL ANXIETY

Even though these events occurred in Europe and Norway, their implications ripple worldwide. For Middle Eastern countries undergoing rapid digital transformation, these are cautionary tales. They underscore that threats are borderless and that lessons from abroad are directly relevant to domestic resilience planning.

LESSONS AND REALITIES

For the Middle East, cyber risk is not hypothetical; it is a pressing reality. Nations in the Gulf and wider region are constructing highly digitized ecosystems, smart cities, automated transport networks, fully digitalized utilities, and integrated financial platforms. These systems promise efficiency and convenience, but they also increase exposure to cyber threats.

•

Communicating openly with citizens: Transparency before, during, and after incidents fosters trust, ensuring people are informed and reassured rather than anxious.

This approach reflects a crucial insight: cyber resilience is not merely a technical obligation; it is a social imperative.

Maintaining public confidence is as important as restoring operational functionality.

REGIONAL CONFIDENCE, GLOBAL LESSONS

Events in Europe and Norway illustrate a universal truth: uptime alone is not enough. Modern infrastructure must earn trust continuously. For Middle Eastern nations, the dual goal is clear: prevent technical disruption and safeguard public confidence. A system that is operational but mistrusted is functionally compromised.

THE NEW CYBER IMPERATIVE

If doubt is now the costliest consequence of cyber incidents, then resilience cannot be measured solely in hours of downtime avoided. It must encompass transparency, visible redundancy, collaboration, and public education.

TRANSPARENCY IS NON-NEGOTIABLE

When incidents occur, organizations must communicate clearly about what happened, how it happened, and what

RAPID DIGITAL TRANSFORMATION, RISING EXPOSURE

The very technologies that power modern smart cities also expand the attack surface. Shared vendor platforms, centralized digital services, and interconnected critical systems create systemic dependencies. A single breach can propagate rapidly, potentially disrupting multiple sectors simultaneously, just as European airports experienced.

PROACTIVE DEFENSE, BUT TRUST IS THE REAL MISSION

Governments and organizations in the region are taking measures to bolster security. These include: • Investing in redundancy and fallback controls: Alternative workflows and manual procedures are tested and documented to ensure continuity during crises.

12

•

Developing regional threat intelligence networks: Real-time sharing of threat data among private and public entities allows for faster detection and response.

•

Running public-private resilience exercises: Simulations and stress tests help both operators and citizens understand system responses under pressure.

Oct-Nov 2025

Cyber incidents no longer break systems alone, they fracture public confidence that modernsocieties depend on." www.techxmedia.com

measures are being taken to prevent recurrence. Silence or obfuscation can amplify fear and speculation, undermining trust more than the outage itself.

understand risks without panic. When people see that safeguards are in place, confidence persists even under threat.

VISIBLE RESILIENCE RATHER THAN HIDDEN BACKUPS

LOOKING AHEAD: THE NEXT FRONTIER OF CYBER CONFIDENCE

Redundant systems and fallback procedures are essential, but their existence must be visible. People need to see that their critical systems are not only operational but intentionally designed to withstand attack. Transparent drills, demonstrations, and real-time reporting help convey robustness.

DEEP COLLABORATION ACROSS SECTORS

Critical infrastructure operates across public and private boundaries. Governments, cloud providers, infrastructure companies, and cybersecurity agencies must coordinate tightly. Threats are interconnected; defenses must be equally integrated. Shared platforms require shared responsibility, and cohesive response strategies minimize both operational and psychological impact.

EDUCATING THE PUBLIC

A knowledgeable public is a resilient public. Awareness campaigns, transparent reporting of incidents, and explanation of protective measures help citizens

The incidents of 2025 reveal a shift in the threat landscape.

The most dangerous consequence of a cyberattack may no longer be the technical failure itself, but the erosion of trust.

When systems that underpin modern life wobble, it is not just operations that falter, belief falters as well.

Infrastructure like airports, dams, energy grids, and transport networks are not merely technical constructs. They carry societal meaning, represent reliability, and embody trust.

When they are compromised, the social and psychological fallout can outlast the technical disruption by months or even years.

In the Middle East, this understanding is shaping strategy.

Resilience is no longer just about protecting data or ensuring uptime; it is a deliberate mission to maintain confidence.

Systems must survive attacks, yes, but they must also be perceived as resilient. Citizens must trust that their digital cities, utilities, and transport networks will continue to function safely, even under duress.

Because in this new era, the greatest threat may not be what is broken, it is what people come to believe could be broken. Doubt, once seeded, can have cascading consequences, slowing adoption of digital services, undermining governance, and creating hesitation in critical decision-making.

Cybersecurity professionals, infrastructure operators, and policymakers now face a dual responsibility: prevent incidents and protect confidence. This requires a holistic approach, integrating technical, psychological, and societal perspectives. Investment in robust technology is critical, but investment in public trust is equally vital.

The real measure of resilience in 2025 is not how quickly systems are restored, but how enduringly public confidence is maintained. In a world increasingly dependent on digital systems, trust is the currency of stability. And as Europe and Norway have shown, once trust is lost, it can be far more difficult to regain than any network or server.

The lesson for the Middle East, and indeed the world, is clear: in the digital age, doubt is more dangerous than downtime.

Protecting it requires vigilance, openness, and foresight. The systems that underpin modern life must be both secure and trusted, because in the end, the most critical infrastructure is not hardware or software, it is the faith of the people who rely on it.

www.techxmedia.com

Oct-Nov 2025

13

GISEC

CYBERSECURITY WITHOUT COMPROMISE,

TODAY AND TOMORROW

Ahead of GISEC Global, the UAE outlines its strategy for quantum readiness, AI-driven defense, and collaborative cyber resilience.

When a single cyberattack has the potential to disrupt hospitals, banks, and critical infrastructure simultaneously, safeguarding digital infrastructure becomes a strategic priority. The UAE has adopted a proactive approach that emphasizes digital sovereignty, quantum preparedness, and the integration of artificial intelligence (AI) across critical systems, ensuring that key data, platforms, and networks remain under national jurisdiction and governance.

“Digital sovereignty is no longer a technical concept - it’s a cornerstone of national independence and strategic stability,” said Lt. Colonel Saeed Mohamed Al Shebli. “The UAE has been remarkably proactive in ensuring that data, platforms, and systems critical to our nation’s wellbeing remain under national jurisdiction and governance.

This approach strengthens our defenses and builds public trust - the most valuable currency in the digital age.”

Digital sovereignty is not merely about controlling hardware or infrastructure; it ensures autonomy in cyberspace.

Policies that prioritize secure data

14

Oct-Nov 2025

LT. COLONEL

SAEED MOHAMED

AL SHEBLI

Law Enforcement Officer Deputy Director, Digital Security Dept Ministry of Interior - UAE www.techxmedia.com

management and strategic oversight of critical systems set a benchmark for how nations can maintain control while fostering innovation.

PREPARING FOR TOMORROW’S THREATS TODAY

Quantum computing presents both transformative opportunities and potential disruptions for global cybersecurity. The UAE has made early investments in research, post-quantum cryptography, and collaborations with institutions such as the Technology Innovation Institute (TII) and Mohamed bin Zayed University of Artificial Intelligence (MBZUAI) to ensure readiness.

“Quantum computing will revolutionize problem-solving but also challenge today’s cryptographic foundations,” Lt. Colonel Al Shebli explained. “The UAE’s foresight and longterm thinking - investing in quantum-safe encryption and advanced AI research - ensure we are not waiting for quantum to arrive; we are preparing to lead when it does.”

Strategic preparation for the quantum era is not only a technical requirement but also a safeguard for national security. Investments in secure communications, resilient infrastructure, and advanced research position the UAE to both influence and benefit from next-generation technologies.

HOW COLLABORATION STRENGTHENS CYBER RESILIENCE

Cyber resilience depends less on who owns systems and more on how effectively collaboration occurs across sectors.

“Cyber resilience today depends less on who owns the systems and more on how well we collaborate across them,” he said. “In the UAE, there’s an extraordinary spirit of partnership between government, private industry, academia, and innovators. Cybersecurity has become an ecosystem of shared accountability, a collective shield protecting the nation.”

Cross-sector collaboration enables rapid threat detection, information sharing, and coordinated response. Partnerships between private companies and public institutions create a resilient network capable of countering increasingly sophisticated cyber threats.

TURNING DATA INTO DEFENSE

Artificial intelligence has become a central tool in the UAE’s cybersecurity infrastructure, enabling proactive threat anticipation and rapid response.

“AI is not replacing human expertise - it’s amplifying it,” Lt. Colonel Al Shebli noted. “The UAE’s integration of AI into national infrastructure demonstrates a balance between technological advancement and ethical responsibility, setting a strong global example for others to follow.”

www.techxmedia.com

Advanced analytics allow continuous monitoring, anomaly detection, and immediate intervention, while keeping human decision-making at the core of defense strategies.

Ethical governance guides AI adoption to ensure responsible and accountable use of emerging technologies.

GISEC GLOBAL: THE CYBER ECOSYSTEM’S IDEA FACTORY

GISEC Global has evolved into the region’s central hub for connecting experts, innovators, and policymakers, facilitating actionable dialogue that shapes national and regional cybersecurity policies.

“GISEC Global has become more than just an exhibition it’s the heartbeat of the region’s cybersecurity ecosystem,” he said. “It connects ideas with action, inspires young professionals, and strengthens the UAE’s position as a global hub for cybersecurity collaboration.”

Events like GISEC promote knowledge exchange, showcase emerging technologies, and enable partnerships that enhance resilience and innovation across industries.

THE UAE’S NEXT-GEN CYBER STRATEGY

Cybersecurity is evolving from reactive defense to intelligent resilience, combining advanced technologies with strategic foresight.

“The UAE will continue to lead by example - not only by adopting advanced technologies but also by nurturing homegrown talent and startups,” Lt. Colonel Al Shebli concluded. “Cybersecurity is evolving into a national enabler of economic growth, innovation, and global competitiveness.”

Efforts to cultivate talent, support startups, and integrate cutting-edge technologies are building a sustainable ecosystem where innovation and security coexist, reinforcing the UAE’s position as a global leader in digital transformation.

THE HUMAN ELEMENT IN CYBERSECURITY

A cybersecurity professional and law enforcement officer with 20 years of experience, he serves as Deputy Director of the Digital Security Department at the UAE Ministry of Interior and sits on advisory boards at ADPoly University and Zayed University.

“I believe in leveraging the human element to strengthen digital defenses. I understand that technology alone cannot secure an organization. It is the people, trained, aware, and vigilant, who are the true frontline defenders against cyber threats,” he said.

Emphasizing the intersection of technology, human expertise, and collaboration, this approach forms the foundation of the UAE’s national cyber resilience strategy.

Oct-Nov 2025

15

HUAWEI

INTERVIEW

TECHNOLOGY ALONE CANNOT STOP

CYBER ATTACKS

As the Gulf region accelerates its digital transformation, cybersecurity has become a cornerstone of national resilience and business innovation. In this context, Eng. Abdulaziz Al Nuaimi, Chief Security Officer at Huawei UAE, highlights how Huawei is collaborating with governments and enterprises to strengthen digital defenses, foster cyber awareness, and build secure, intelligent ecosystems that support the region’s long-term digital ambitions.

CYBER RISKS AMID RAPID DIGITAL ADOPTION

With the Gulf countries rapidly embracing digital transformation, emerging technologies such as artificial intelligence are becoming integral to government services and business operations. Eng. Al Nuaimi highlighted that this rapid adoption comes with its own set of risks.

“While using these new emerging technologies, we need to consider the threats associated with them and ensure we have effective solutions and mitigation measures,” he explained. He pointed to the UAE Cyber Security Council’s recent release of an AI cybersecurity policy, designed to help both governments and service providers address AIrelated security challenges. However, he emphasized that as technology evolves, so do the threats, making vigilance a continuous requirement.

TRUST THROUGH TRANSPARENCY

Huawei has a longstanding presence in the global technology landscape, serving over 3 billion people in 170 countries. Eng. Al Nuaimi discussed the importance of trust while driving innovation. “We communicate frequently with our customers, governments, and entities about our security practices and how we design our products securely,” he said.

He noted Huawei’s Transparency Center as a key initiative that allows governments to review security practices firsthand. Moreover, Huawei ensures its operations align with both local laws and international standards, reinforcing its commitment to cybersecurity best practices.

AI-POWERED CYBER THREATS

With cyber attacks increasingly leveraging AI, staying ahead of evolving threats is crucial. Eng. Al Nuaimi explained that Huawei engineers continually monitor emerging risks and integrate these insights into the design of their solutions.

“Technology alone cannot stop cyber attacks. People and culture matter too,” he said, stressing the importance of continuous training and upskilling of engineers to counter sophisticated threats.

16

Oct-Nov 2025

SECURITY IN EVERYDAY WORK

Human risk is a significant challenge in cybersecurity.

Huawei addresses this through end-to-end assurance practices, embedding security considerations from strategic leadership to day-to-day operations. Employees across all departments receive frequent awareness training and capability-building to understand threats and incorporate security into their work.

A MESSAGE TO CISOS

In closing, Eng. Al Nuaimi shared a perspective for Chief Information Security Officers (CISOs): technology exists to serve humans, and cybersecurity must ensure that this service is delivered safely. “Whenever we serve, we need to think about how to do it securely, without compromising security and privacy,” he emphasized.

Huawei’s approach at GITEX Global 2025 underscores the balance between embracing cutting-edge technology and ensuring robust cybersecurity, reflecting a commitment to innovation that is both responsible and secure.

Cybersecurity is not powered by technology alone, it depends equally on people, culture, and continuous vigilance."

www.techxmedia.com

ENG.

ABDULAZIZ

AL NUAIMI Chief Security Officer Huawei UAE

www.techxmedia.com

Oct-Nov 2025

17

BEYONDTRUST

OPINION

10 TRENDS DRIVING UAE

CYBERSECURITY STRATEGY IN 2026

As we reach the end of the mid 2020s, UAE-based CISOs will take stock of how far we have come and where we may be this time next year. Daily conversations rarely stray far from artificial intelligence (AI). As we look forward to the expected trends of 2026, we will see that AI seeps into how we work, how we play, and how we make ourselves secure.

In earlier times, our physical possessions, intellectual property, and purchasing power were targets. More recently it is our identity. So much of what we seek to defend is the digital record of who we are and what we do, because to hijack it is to gain access to a goldmine. So here are the trends that will shape – some in obvious ways, others in less obvious ones – cybersecurity strategy in 2026.

TECH TARIFFS

While the realities of global trade may remain difficult to pin down in precise rates, B2B and B2C digital services may become subject to taxes and tariffs by many governments around the world. At the time of writing, however, the UAE government appears to be concentrating its tariffs and duties on physical goods, with no plans to include cross-border cloud, SaaS, or streaming offerings.

THERE IS NO ‘SOON’; NEOCLOUDS ARE ALREADY HERE

We are witnessing a splintering of the global cloud market (and hence an expansion in the attack surface) as neoclouds supplant hyperscale infrastructure as the home of compute-heavy workloads such as AI. Abu Dhabi’s G42 is rapidly positioning itself as a regional leader in this arena

18

Oct-Nov 2025

having already announced a US$15.2-billion investment from Microsoft. More recently, G42 and Microsoft promised an “[acceleration of] the nation’s digital transformation” through a planned 200-megawatt (MW) expansion of datacenter capacity to align with the Abu Dhabi powerhouse’s neocloud strategy.

In 2026 expect to see competition heat up in UAE industries as businesses rapidly deploy new digital experiences and hyperscalers respond by also offering the GPU-centric bare-metal performance and simplified pricing needed by AI-hungry organizations.

AGENT WARS

UAE startups like Gentek.ai are now specializing in agentic AI, a national submarket that was worth an estimated US$49.1 million in 2025. B2B and B2C functions are turning

www.techxmedia.com

CHRISTOPHER

HILLS

Chief Security Strategist BeyondTrust www.techxmedia.com

Oct-Nov 2025

19

BEYONDTRUST

OPINION

to autonomous middleware to add value, but at the expense of an expanded attack surface. A combination of growth areas such as smart-home tech and IT-OT mergers in plants and factories will lead to subsequent growth in the use of AI agents. As always, hype will give rise to haste and may lead to some cautionary tales in 2026 as new attack vectors are exploited. Standing between brands and their demise will be robust governance and adherence to best practices such as JIT access and the principle of least privilege.

THE GUIDING LIGHT

There is another reason to move strategically on AI adoption. Rapid deployment has already led to a global cultural backlash that challenges the inevitability of AI. In the UAE, where the government has taken a clear and visionary stand on privacy and social responsibility, organizations will at least have access to white papers and other published wisdom on ethical AI. Within the confines of these guardrails, we can expect to see a more measured approach to AI use cases in 2026. It will be the goal of these more prudent innovators to pay attention to data sourcing, intellectual property, model bias, and the sustainability of physical infrastructure.

HUSTLES AND RESHUFFLES

AI is already being monetized as a business consultant, data analyst, writer, coder, content creator, and translator – a list that barely scrapes the surface. As models become easier to produce, more and more use cases will be converted to apps, and more and more job roles will be fulfilled by AI. This creates a challenge for employers to find a balance between employee productivity and efficiency and to engage in the skilling, reskilling, and upskilling of employees to optimize talent pools and competitiveness.

AUTOMATED TOXINS AND FINANCE FRAUD

In 2026, watch out for fraudulent billers who pose as legitimate ones or manage to create convincing new accounts that siphon funds and process them via thirdparty brokers. Because of financial organizations’ tendency to only defend against account-poisoning at the individual level, we can expect these kinds of attacks to flourish in the age of automation. We must ensure strong secrets management where credentials and data, such as routing and account numbers, are not compromised. If we do not, we run the risk of institutions falling prey to a new wave of financial crime.

HIDDEN HISTORIES REVEALED

With the exception of organizations with the strongest identity and access management (IAM) postures, 2026 will

20

Oct-Nov 2025

be a year of unearthing a mountain of rogue identities from past breaches. Such artefacts often go undetected until the implementation of modern identity security platforms with graph-based analytics. Some of these identities may even predate the introduction of security logs, making it hard to trace the role they played in past incidents. These discoveries will lead to closer ties between security and IAM teams so that lessons can be learned and precautions taken to prevent future incidents.

RIP VPN

VPN’s now-established reputation as a security vulnerability – a potential source for harvesting credentials or a leverage point for persistent access – will lead to a reimagining of the remote-access conundrum. In 2026, UAE enterprises will find ways to make every remote session secure, employing methods such as Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), or a SoftwareDefined Perimeter (SDP).

TRACK ME; HACK ME

Available in many UAE electronics stores, low-cost geolocation trackers like Apple AirTags may be able to help you find your lost keys or misplaced luggage but, as with many useful IoT solutions, it is a target for threat actors.

While many threats pertain to the commission of more violent crimes that are mercifully scarce in the UAE, geotrackers also have implications when it comes to privacy and corporate compliance.

WORKERS WITHOUT BORDERS

So-called digital nomads have led to the erosion of corporate network boundaries. This change has forced cybersecurity experts to evolve their concept of the perimeter and pivot to identity-centric practices. Instead of discussing the remote workforce, we now talk about the distributed workforce.

The UAE is among many nations now offering visas for digital nomads. The security implications for the overseas companies that employee these workers are many and will call for powerful IAM solutions with visibility capabilities that account for geolocation and time differences as well as the usual accounts- and privileges-based issues.

GUARD UP

We should always face a new year with hope. Best practices come with enough caution to justify that hope. Good security hygiene and minimized risk surfaces are the foundation of resilience against the threats contained in AI, digital-nomad workforces, and neoclouds. Get to know your unique attack surface and how it relates to the trends mentioned here. Think about how zero trust, least privilege, just-in-time access, Identity Threat Detection and Response (ITDR), and AI governance can help. Keep your eyes on the threat landscape and keep your guard up.

And face the future with hope.

www.techxmedia.com

Designed for your enterprise business

View more

Enterprise Hard Drives As Big Data drives demand for more distributed storage in the cloud and on premises, enterprise server and storage systems need to be built using trusted solutions. Toshiba’s Enterprise Capacity Hard Drive – MG Series offers formatted capacities as high as 24 TB with interface options including SATA and SAS and delivers 24/7 operation at a workload of 550 TB/year. The MG Series is ideal for enterprise storage array and industrial server and storage systems. It provides the capacity and advanced technologies to meet the special demands of datacenter and cloud-scale infrastructures.

Capacities

24 22 20 18 16 14 12 TB

TB

TB

TB

TB

TB

10 8 6 4 2 1 TB

TB

TB

TB

TB

TB

MG Series Top Features • 3.5“ SATA or SAS Hard Drive • 7,200 rpm • Persistent Write Cache Technology • 550 TB/year workload • Flexibility in block size • 24/7 operation • 5-year warranty Use for • Enterprise Server • Enterprise Storage • Cloud Scale up and Scale out Storage • Archive Systems • Industrial and Surveillance Storage

TB

toshiba-storage.com

CLOUDFLARE

OPINION

CHRISTIAN

REILLY

DON’T LET YOUR

Field CTO, Cloudflare

WEBSITE CRASH THIS HOLIDAY SEASON 22

Oct-Nov 2025

www.techxmedia.com

The holiday season remains a make-or-break period for most retailers. Purchases in November and December often comprise about 19% of total annual sales. And a growing volume is happening online: Salesforce reported that online sales reached an all-time high of $1.2 trillion globally in 2024.

With mobile driving 69% of online purchases in 2024, retailers need fast, secure, always on sites, as AI powered cyberattacks increasingly target ecommerce platforms. This is why retailers must have a comprehensive holiday readiness strategy that ensures performance, availability, and security.

UNDERSTAND THE CHALLENGES AVAILABILITY AND PERFORMANCE

Retailers must ensure their websites, mobile apps, APIs, and payment systems perform seamlessly under heavy load. Latency is costly, One recent study showed that pages that take more than four seconds to load experience a bounce rate of 63%.

RESOURCE CONSTRAINTS

IT and security teams are expected to deliver personalized omnichannel experiences while managing higher volumes and tighter budgets. Many struggle with scale, complexity, and evolving threats.

STRENGTHEN SECURITY WITH A UNIFIED PLATFORM

Retailers benefit from a unified platform that integrates performance, infrastructure scaling, and advanced security instead of managing multiple tools.

DEFENDING AGAINST BOTS

Malicious bots can scrape data, steal credentials, or execute fake transactions. An effective bot management solution distinguishes between good and bad bots and blocks harmful activity without affecting legitimate customers.

HANDLING DDOS ATTACKS

DDoS attacks can flood networks with terabits of traffic per second. A cloud-based defense with a global network backbone is essential to absorb such attacks while keeping services online.

RANSOMWARE AND CREDENTIAL ATTACKS

Phishing remains a leading cause of breaches.

Compromised credentials allow attackers to move laterally within systems. Multi-factor authentication, zero-trust architectures, and robust email security are key defences.

DATA PROTECTION

Compliance with PCI DSS and other regulations requires encryption, client-side attack prevention, and data-loss prevention (DLP). Network segmentation further limits the impact of breaches.

www.techxmedia.com

DELIVER OMNICHANNEL EXPERIENCES, EFFICIENTLY

Shoppers today move seamlessly between mobile, web, and in-store experiences. Retailers need consistent, responsive performance across all touchpoints.

SCALABLE INFRASTRUCTURE

Ahead of the holiday surge, businesses should prepare to scale servers, apps, APIs, and services rapidly. Cloud platforms with auto-scaling capabilities help maintain performance during traffic spikes.

API-FIRST AND DEVELOPER PRODUCTIVITY

Modern retail relies on connected systems and APIs linking websites, apps, and in-store platforms. APIs enable innovation but are increasingly targeted by attackers. Securing them is essential.

UNIFIED VENDOR ECOSYSTEM

Using too many independent tools creates integration challenges, security gaps, and higher costs. A unified platform simplifies management and improves visibility across security and performance.

KEY QUESTIONS FOR RETAILERS: • • • •

Can your ecommerce site handle major traffic surges without slowing or crashing?

Are your defenses ready for bots, DDoS, ransomware, and API attacks?

Do customers enjoy a seamless experience across mobile, web, and store channels?

Are your teams equipped to respond quickly and efficiently with minimal vendor complexity?

If any of these answer s are uncertain, now is the time to act.

THE BOTTOM LINE

By adopting a unified, cloud-native platform that scales and defends your infrastructure while empowering your developers, you can turn the holiday surge into an opportunity for growth.

With the right preparation, your business won’t just survive the rush, it will thrive.

Oct-Nov 2025

23

MANAGEENGINE

OPINION

SHOBANA SRUTHI

MOHAN Enterprise Analyst, ManageEngine 24

Oct-Nov 2025

www.techxmedia.com

THE FUTURE OF BFSI

CYBERSECURITY In the Middle East and Africa (MEA), the BFSI sector stands at a crossroads where digital expansion is both a business imperative and a risk amplifier. A 2024 study by the UAE Cybersecurity Council and Trends Research and Advisory revealed that while 65% of UAE residents feel confident in spotting fraud, 56% still experience at least one fraud attempt every month, a stark reminder of how quickly scammers evolve their tactics. Because of the unprecedented speed and innovation with which cyber attackers operate, banks must develop real-time detection and response frameworks. Vulnerability assessment, penetration testing, and stronger governance practices are becoming central to security programs, signalling a shift toward agile, adaptive protection that moves faster against threats.

EMERGING THREATS: DDOS, RANSOMWARE, AND AI-PHISHING

The BFSI industry threat landscape in the region has evolved beyond traditional fraud, giving rise to sophisticated and coordinated cyberattacks that challenge the resilience of entire financial ecosystems. DDoS attacks surged by 236% in Q2 2025, with critical banking infrastructure being increasingly targeted and disrupting services for millions of users. The financial sector felt the greatest impact, accounting for 38% of all incidents.

Ransomware attacks in the Middle East are notably higher than the global average, impacting 0.72% of organizations in the region compared with 0.44% worldwide. Meanwhile, AI-powered phishing campaigns have grown alarmingly sophisticated, replicating legitimate communications, and even presenting counterfeit CAPTCHA pages to avoid detection.

ADDRESSING THE PEOPLE PROBLEM

The shortage of skilled cybersecurity talent in the MEA region limits the ability of BFSI institutions to defend themselves effectively against highly sophisticated threats.

However, managed security service providers (MSSPs) and channel partners are stepping up as force multipliers, bridging critical gaps by not only supplying technology stacks but also delivering integrated, automation-driven solutions that provide comprehensive cyber protection.

By embedding seamless orchestration across SIEM, IAM, and threat monitoring systems, MSSPs help banks shrink response times, close operational silos, and allow in-house talent to focus on strategic defence rather than being tied up with reactive firefighting.

SECURITY-INTEGRATED DESIGN PRINCIPLE

Over the next five years, BFSI cybersecurity in the MEA

www.techxmedia.com

region will need to focus on aligning processes, systems and policies across institutions and borders to counter realtime threats effectively.

Gulf Cooperation Council countries are signalling moves toward standardised regulatory frameworks, aligning compliance requirements to enable cross-border operational security. Banks are expected to phase out legacy security stacks in favour of AI-powered, self-healing systems capable of continuously learning from evolving threats. Hybrid cloud adoption will accelerate, though subject to stringent data localisation laws, requiring vendors to provide secure, compliant infrastructure aligning with standards such as ISO 22301.

EMPOWERING LONG-TERM DEFENCE

Building resilience for the long-term requires BFSI organisations to implement: •

Stronger security awareness programs for customers alongside incident support mechanisms to limit the fallout of fraud.

•

Continuous upskilling of cybersecurity staff, teaching them to navigate AI-driven defence tools; interpret complex threat intelligence; and collaborate seamlessly across FinTech, regulators, and technology partners.

•

Investments in proactive tools, detection, pen-testing, orchestration, etc., that anticipate threats rather than simply respond.

If the MEA’s BFSI institutions can manage this transition from a reactive incident management approach to a sustained cyber resilient culture, they can stay ahead of attackers and maintain service continuity, ultimately preserving customer confidence.

Oct-Nov 2025

25

INTERSEC

From cyber to fire safety, Intersec 2026 connects ecosystems, expertise, and leadership for resilient societies worldwide today."

DISHAN

ISAAC Show Director Intersec

26

Oct-Nov 2025

www.techxmedia.com

INTERSEC 2026 SETS THE STAGE FOR

TRANSFORMATION As the 27th edition of Intersec approaches this January, attention is increasingly drawn to the significant shifts occurring across the global security, safety, and fire protection sectors. The rapid pace of geopolitical, technological, and environmental changes has intensified, emphasising the industry's need for clarity, shared purpose, and a renewed commitment to resilience.

Intersec has always been shaped by the people who participate in it. The strategic thinkers, operational experts, innovators, responders, regulators, and industry leaders whose collective expertise defines the trajectory of our fields. This year, however, holds particular significance.

The operational environment has undergone substantial changes, and the challenges and opportunities facing us are now more complex, interconnected, and consequential than ever before.

We operate in a world where complexity is no longer rare; it has become the norm. The rapid pace of technological change, global uncertainty, climate volatility, and converging physical–digital threats are pushing organisations to rethink their approaches to preparation, response, and innovation.

In this context, Intersec 2026 has expanded not only in size but also in responsibility.

This edition will cover 67,000 square metres, marking our largest footprint yet, and will welcome over 1,400 exhibitors from more than 60 countries. The scale indicates the level of demand; it also conveys a clear message: throughout our sectors, the demand for collaboration, knowledge sharing, and preparedness has reached unprecedented levels.

At the core of Intersec is the ability to unify an entire ecosystem. The industries we serve, including commercial security, fire and rescue, emergency response, cybersecurity, health and safety, homeland security, and policing, once operated within clearer boundaries.

Today, those boundaries have blurred. No organisation can think in silos, and neither can an event like ours. This reality has shaped the 2026 programme from the ground up,

www.techxmedia.com

ensuring every feature reflects the interconnected world in which we operate.

The International Security Leaders’ Summit exemplifies one of the most significant platforms within Intersec. It has evolved into a forum where senior leaders address the realities of modern risk, drawing on practical experience rather than theoretical constructs. Discussions on crisis leadership are particularly relevant because they directly address the human aspect of the industry.

The record rainfall the UAE experienced in April 2024, the heaviest since national records began in 1949, reminded all of us how quickly environments can shift. It was a moment that tested systems, stretched coordination, and proved that leaders must be ready to make decisions with incomplete information and unwavering calm.

This year, we will hear from professionals like David Warham from Dubai Airports, who will bring this into sharp focus.

His reflections on preparation, trust, and multi-agency collaboration offer lessons that extend far beyond aviation.

The same applies to the voices joining us from national infrastructure, government ministries, global corporations, and academic institutions. These leaders are facing the same pressures many of our visitors encounter: talent shortages, digital convergence, aligning with national strategies, managing cultural complexity, and navigating the realities of AI and quantum technologies. Intersec provides them with a platform to exchange honest, transparent, and highly valuable practical insights.

Cybersecurity plays a significant role in that conversation.

In recent years, it has evolved from a specialised discipline to the thread connecting every operational environment. At Intersec, this evolution is captured in the InCyber Briefing, which brings together global and regional specialists to tackle the next wave of digital risk. With the UAE’s cybersecurity market set to grow significantly by 2030, the conversations around supply-chain resilience, AI-powered threats, regulatory complexity, and board-level reporting are not abstract; they are urgent.

Oct-Nov 2025

27

INTERSEC

What inspires me is seeing how these sessions move beyond buzzwords into practical guidance that security and IT leaders can implement immediately. Fire and rescue professionals will also find a dedicated space to examine the challenges shaping their sector. Urban density, climate change, new materials, and rising expectations for building safety have all shifted the demands placed on fire services and life-safety specialists. The Fire & Rescue Conference explores AI-enabled fire prediction, evolving fire dynamics, human behaviour under stress, and global case studies that offer invaluable insights into preparedness.

The inclusion of Passive Fire Day, led by the Association for Specialist Fire Protection, demonstrates a renewed push to professionalise a sector that has historically been underestimated despite its lifesaving potential. This is exactly the kind of forward movement Intersec aims to champion.

Health and safety also continues to play a critical role, particularly as organisations navigate a changing workforce, new technologies, and heightened expectations around wellbeing. This year’s HSE programme emphasises the psychological dimensions of work, the human factors behind automation, and the cultural foundations that underpin strong safety performance. The conversations span construction, occupational road risk, industrial environments, and the emerging responsibilities that come with digital transformation.

Another defining feature this year is the emphasis on developing the control room of the future. The new Control Room Innovation Theatre demonstrates how AI, cognitive design, and human-centred environments can enhance

Intersec 2026 is where security, safety, and fire protection leaders shape readiness for a volatile world together."

28

Oct-Nov 2025

operator performance and decision-making under pressure.

Control rooms serve as the central hubs of modern security and safety operations, and this initiative highlights their increasing strategic significance.

Of course, Intersec is also a marketplace, one of the largest and most diverse in the world for security, safety, and fire protection solutions. With over 1,400 exhibitors and a strong presence of international pavilions, the show floor is where global innovation becomes accessible. Whether it’s next-generation surveillance, advanced access control, cyberphysical convergence tools, fire-engineering technologies, PPE advancements or emergency response equipment, the exhibition floor brings together practical solutions with future-focused thinking.

This is where visitors can walk from concept to application within minutes, meet the teams behind emerging technologies, and discover ideas that can transform their operations.

Celebrating the people behind these innovations is equally important. The Intersec Awards return this year with 17 categories, our most comprehensive line-up yet, recognising excellence across fire protection, safety, homeland security, commercial security, cybersecurity, consultancy, leadership, and Emirati talent. We have seen an encouraging rise in submissions, a sign that companies and individuals are eager to showcase their contributions to global best practice.

Honouring this progress matters because it helps set the standards that will carry our industries forward.

All of this unfolds in a city uniquely positioned to host such a gathering. Dubai’s continued ranking among the world's safest countries reflects a long-term national commitment to readiness, innovation, and collaboration. Intersec aligns with these goals: raising industry standards, supporting national objectives, and connecting international stakeholders responsible for protecting people, assets, and infrastructure.

The aim for visitors at Intersec 2026 extends beyond technology and conference sessions. It is to foster clarity amidst prevailing uncertainty. Attendees are encouraged to establish connections with partners they can depend on in the long term. Ultimately, the goal is to leave with reinforced confidence, grounded in understanding and preparedness, and with a shared sense of purpose.

Our industries carry an extraordinary responsibility. We protect what matters most: people, communities, critical infrastructure, national capability, and the trust that underpins our societies. Intersec exists to support that mission.

It is my pleasure to welcome you to Dubai World Trade Centre from 12–14 January 2026, and I look forward to shaping the next chapter of global security, safety and fire protection together.

www.techxmedia.com

Held under the patronage of H.H. Sheikh Mansoor bin Mohammed bin Rashid Al Maktoum, Chairman of Dubai Ports and Borders Security Council

12 – 14 January 2026 Dubai World Trade Centre

The world’s premier event for Security, Safety and Fire Protection.

50,000+

140+

Visitors

Visiting Countries

1,400+

60+

Exhibitors

Exhibiting Countries

SCAN THE QR CODE TO GET YOUR COMPLIMENTARY VISITOR PASS intersec.ae.messefrankfurt.com

intersec@uae.messefrankfurt.com

CISO SPEAKS

ARAMCO DIGITAL

AI HAS ARRIVED.

IS GOVERNANCE READY? In an exclusive conversation with TECHx Media, Imad Aldhfiri, Vice President of Governance, Risk, and Compliance at

Aramco Digital, shares how GRC is evolving

in Saudi Arabia amid digital transformation, AI adoption, and ESG expectations. He

discusses real-time governance, fostering

a risk-aware culture, managing third-party

risks, and the rising importance of AI ethics and climate resilience in building trust, competitiveness, and long-term value.

30

IMAD

ALDHFIRI VP of Governance, Risk, and Compliance Aramco Digital

How has your approach to Governance, Risk, and Compliance evolved over the years, especially in response to growing digital, geopolitical, and ESG pressures?

My GRC practice has shifted from compliance-focused checklists and audits to a forward-looking approach that prioritizes long-term value creation. GRC is now a company-wide practice connecting governance to strategy, risk management to innovation, and compliance to ethical leadership.

SAMA’s Risk-Based Supervisory Framework, further shape risk and compliance practices.

Digitalization has been the biggest driver. With cloud technologies, AI, and advanced analytics, risk has become more complex. In Saudi Arabia, AI is projected to contribute over US$235 billion to the economy by 2030, or more than 12% of GDP. This requires governance frameworks embedding privacy, cybersecurity, and digital ethics into every decision.

How are AI, automation, and predictive analytics reshaping GRC? Are we moving toward real-time governance?

GRC is moving from retrospective reporting to real-time governance. Manual reporting and audits delayed response times, but automation frees resources for strategy and foresight.

Geopolitical factors demand flexibility. The Personal Data Protection Law (PDPL), effective September 2024, mandates local data storage and limits cross-border data movements.

Unlike the EU’s GDPR, which emphasizes portability, PDPL prioritizes national data sovereignty, requiring GRC to balance local laws with international standards. Other frameworks, such as the CMA Corporate Governance Regulations and

Saudi Arabia leads in AI adoption. The Cisco AI Readiness Index 2024 shows 54% of organizations use predictive AI, and 44% have adopted generative AI. Banks and regulators are testing AI-powered fraud detection, anomaly monitoring, and regulatory oversight, providing executives with 24/7 insight. Predictive analytics helps identify vulnerabilities before they escalate, enabling continuous compliance.

Oct-Nov 2025

ESG expectations have expanded GRC’s role. Sustainability and ethical governance now need to deliver measurable results. Anti-bribery regulations, like those led by Nazaha, broaden the accountability scope. GRC has become a strategic tool for trust, investment, and sustainable growth, aligned with Saudi Arabia’s economic transformation.

www.techxmedia.com

Challenges remain around ethical AI, algorithmic transparency, and regulatory trust. Still, AI-driven compliance strengthens trust, resilience, and competitiveness, aligning with the Kingdom’s digital ambitions.

How do you foster a risk-aware culture, especially when compliance feels like a box-ticking exercise?

Leadership must show that risk management drives competitiveness rather than bureaucracy. Saudi regulators, including CMA, SAMA, and NCA, are raising expectations for risk-aware performance.

Cyber risk is ranked above inflation as a top threat in Saudi Arabia, and Vision 2030 aims for US$100 billion in annual FDI, making robust risk management crucial. Embedding risk indicators into KPIs, scenario-based simulations, gamified compliance programs, and reward systems helps employees perceive risk management as a core responsibility. Aligning governance with Shariah principles reinforces culturally relevant values.

What are the key challenges in maintaining consistent compliance across different regulatory environments?

Balancing compliance across jurisdictions is challenging.

The PDPL requires local data storage and authorizations for cross-border transfers, contrasting with the EU’s GDPR.

Modern GRC connects strategy, risk, and compliance with AI, ethics, and sustainability for lasting trust."

I rely on global compliance principles grounded in integrity, transparency, and accountability, then tailor them locally.

This includes cybersecurity standards, anti-bribery laws, ESG reporting guidelines, Shariah-compliant practices, and financial regulations. Technology, such as RegTech, enables real-time anomaly detection, accurate reporting, and prompt filings. Compliance committees integrating global and local expertise harmonize practices while respecting cultural and legal obligations.

What is often overlooked in managing third-party or vendor-related risk?

Third-party risks are underestimated. Organizations often focus on contracts and financial stability, ignoring

www.techxmedia.com

cybersecurity weaknesses, unethical labor practices, or subcontractor behavior.

Cybersecurity is critical. Over one-third of 2024 data breaches were linked to third-party access. ESG compliance is another blind spot, as many companies extend sustainability strategies internally but not across supply chains. Fourthand fifth-party dependencies add complexity. Continuous monitoring, audits, ESG certifications, and accountability frameworks are essential for resilient, trusted supply chains, especially in Saudi Arabia’s globally integrated economy.

How is GRC driving ESG accountability beyond reporting?

GRC is shifting from oversight to active ESG leadership.

In Saudi Arabia, ESG drives strategy, and GRC embeds sustainability, ethics, and accountability into business models. The Saudi Exchange requires boards to demonstrate how ESG goals integrate into operations.

Risk frameworks now include carbon exposure, supply chain ethics, and social responsibility. Continuous monitoring using integrated GRC platforms ensures sustainability is embedded in strategy and culture. Enhanced ESG disclosure is linked to better financial performance, higher ROA and ROE, operational effectiveness, and investor confidence. ESG is a strategic driver of long-term value, not just compliance.

How do you ensure simplicity, clarity, and agility in complex GRC systems?

Principle-based design is key. Governance should be grounded in honesty, responsibility, and accountability, rather than technical jargon. Technology translates regulations into realtime dashboards for leaders and employees.

Clear communication via training, scenario simulations, and gamification connects compliance to daily work. Continuous monitoring and scenario testing allow organizations to pivot quickly. This approach makes GRC simple, clear, and agile while guiding businesses confidently through complexity.

What area of GRC is underexplored but will be crucial in the next 5–10 years?

Digital ethics and AI governance are underexplored but vital. With Saudi Arabia leading in AI strategy, algorithmic fairness, data privacy, and explainability are essential to trust and competitiveness. Many organizations still focus on cybersecurity without embedding AI accountability, which can undermine public and regulatory confidence.

Climate and environmental governance is another critical area. Carbon risk, transition to renewables, and reputational risks like greenwashing must be integrated into risk frameworks. Embedding AI governance, digital ethics, and climate resilience into compliance and governance models will help Saudi businesses protect themselves and become global benchmarks for responsible, trustworthy innovation.

Oct-Nov 2025

31

CISO SPEAKS

AL HAMRA

AI CAN DEFEND OR ATTACK,

THE CIO’S DILEMMA AI can be your defender or your attacker, it all depends on

to work closely with regulatory bodies and integrate checks

Information Officer at Al Hamra. In a world increasingly

and operational standards while still enabling efficiency.

how you use it," says Kiran Dnyaneshwar Shinde, Chief defined by digital transformation, this paradox is at the heart

of every enterprise’s challenge: leveraging technology for

OPPORTUNITIES AND RISKS

maintaining resilience.

automation, are transforming enterprise IT, but they are

growth while safeguarding data, ensuring compliance, and

In an exclusive conversation with TECHx Media, Shinde

discussed how organizations can navigate this delicate

Emerging

technologies,

AI,

cloud

computing,

and

double-edged swords. Shinde underscores the need for a cautious, strategic approach.

balance, sharing insights on AI, cybersecurity, compliance,

"AI is instrumental in content creation, predictive

sustainable digital ecosystems.

models, for instance, process prompts to generate

and the evolving role of the CIO in shaping secure and

For Shinde, digital transformation is not merely about adopting

new tools. It is about integrating them securely into existing systems, aligning them with business strategy, and embedding governance and compliance at every step.

"Digital transformation has been part of our systems and industry for quite some time," Shinde explains. "The challenge is how to implement it securely while leveraging the advantages of digitization."

Even routine processes, such as onboarding a customer onto

analytics, and threat detection," he says. "Large language insights, but the underlying machine learning also learns from your internal data. This can create risks if

sensitive information is inadvertently shared outside your organization."

AI can strengthen cybersecurity. Machine learning detects

anomalies, predicts zero-day attacks, and automates

responses faster than human analysts. Behavior analytics monitor unusual patterns among employees and external users. AI-driven Security Operations Centers (SOCs) can neutralize threats in real time.

a digital platform, highlight the complexity of this task. APIs

However, AI can also be weaponized. Phishing attacks, deep

or Emirates ID portals, simplifying verification. However,

AI to bypass traditional defenses.

can automatically pull data from central regulatory bodies

once the data is in the organization’s systems, protecting it

fakes, voice cloning, and automated exploits can all leverage

becomes paramount.

"The future will increasingly involve defensive AI countering

"This data resides in your organization’s data center," Shinde

Human judgment, policy-making, and risk evaluation

notes. "It becomes your responsibility to safeguard it. You can mask or encrypt the data, but you must also have clear

offensive AI," Shinde says. "But humans remain essential. cannot be replaced by machines."

cybersecurity policies defining who can access it, at what

THE EVOLVING ROLE OF THE CIO

or stolen, the brand’s reputation is at stake."

enabler, bridging technology, business strategy, and

level, and under what conditions. If customer data is misused

Compliance and regulatory alignment are also central to

secure digital transformation. Shinde emphasizes the need

32

into automated systems, ensuring organizations meet legal

Oct-Nov 2025

The CIO’s role has evolved from IT custodian to strategic

innovation. Shinde describes the modern CIO as a Chief Intelligence Officer, innovation orchestrator, cultural leader, and cybersecurity steward.

www.techxmedia.com

AI can defend or attack, depending on use; CIOs must balance innovation, security, and human judgment."

KIRAN DNYANESHWAR

SHINDE Chief Information Officer Al Hamra

www.techxmedia.com

Oct-Nov 2025

33

CISO SPEAKS

AL HAMRA

• Cybersecurity and Digital Trust: Predictive and adaptive

AI-driven security, zero-trust architectures, quantum-safe

encryption, and digital identity governance will define "CIOs today align technology roadmaps with business KPIs.

enterprise resilience. The focus will move from reactive

They ensure that IT and business goals move in tandem,"

defense to proactive threat anticipation.

operational excellence must all be supported by technology."

• Multi-Cloud and Edge Computing: Cloud ecosystems will

CIOs also ensure that data is trusted, democratized, and

real-time operations in logistics, manufacturing, and latency-

he explains. "Revenue growth, customer experience, and

evolve into multi-cloud and edge deployments, supporting

accessible, empowering leaders across the enterprise to make

sensitive applications, while also ensuring compliance.

currency," Shinde emphasizes. "It must be secure, governed,

• Sustainable and Responsible Technology: CIOs will

informed, real-time decisions. "Data is the new corporate and actionable."

prioritize green IT, energy-efficient data centers, circular

Beyond technology, modern CIOs foster collaboration and

technology adoption with ESG goals.

drive digital adoption, and cultivate innovation, all while

•

culture. They guide organizations to break down silos,

hardware lifecycles, and automated ESG reporting, aligning

Human-Centered Digital Experiences: AI-driven

maintaining resilience against cyber threats.

personalization, empathy at scale, and seamless omnichannel

STRATEGIC PRIORITIES FOR THE NEXT FIVE YEARS

tenants, and citizens.

Looking ahead, Shinde identifies key trends shaping

engagement will define success for customers, employees,

Shinde emphasizes that enterprises must architect

enterprise IT:

intelligence, trust, and sustainability into their DNA. "Those

• AI Everywhere: AI will shift from augmentation to

The next competitive age lies in personalization, seamless

automation, driving content creation, productivity, coding

that chase novelty without strategy risk falling behind. experiences, and responsible technology."

COMPLIANCE AND GOVERNANCE: THE INVISIBLE PILLARS Shinde underscores that governance and compliance are not merely obligations, they are enablers of trust and

AI transforms operations and decision-making, yet CIOs must ensure human insight, ethical use, and resilient systems guide every innovation." acceleration, and operational efficiency. Co-pilots and generative AI tools will become essential across departments.

•

Intelligent Data Ecosystems: Data will move from

centralized silos to contextual, connected ecosystems.

Enterprises will invest in data fabrics, lake houses, and

analytics platforms that convert raw data into actionable insights and revenue opportunities.

34

Oct-Nov 2025

resilience. Regulatory checks, internal policies, and data

access controls must be embedded into digital workflows.

Organizations that neglect compliance risk reputational

and financial damage, even as they pursue technological innovation.

THE HUMAN-AI PARTNERSHIP Throughout, Shinde returns to a central principle: humans and AI must work together. AI can accelerate operations,

detect threats, and generate insights, but humans provide judgment, ethics, and strategy. A hybrid model of human

oversight and machine efficiency, according to Shinde, is the only sustainable path forward.

"Even as AI becomes central to digital transformation and cybersecurity, human leadership remains the ultimate

differentiator," he concludes. "Success lies in balancing

innovation, security, and culture, while embedding trust and sustainability into every decision."

www.techxmedia.com

SANS INSTITUTE

OPINION

JAMES

TARALA Senior Faculty SANS Institute 36

Oct-Nov 2025

www.techxmedia.com

COMMUNITY TEMPLATES MAKE THREAT MODELLING REAL Threat modelling is often presented as a theoretical activity, something reserved for whiteboards or security assessments that rarely translates to day-to-day decisions. In practice, however, effective threat modelling is a business enabler. It becomes a mechanism security teams can use to justify investments, prioritise controls, and align their strategies with organisational risk. This article outlines a practical approach to threat modelling that draws on community resources and proven governance practices.

UNDERSTANDING THE REAL GOALS OF THREAT MODELLING

Many organisations acknowledge the importance of threat modelling but struggle to implement it effectively.

Too often, the exercise is reduced to filling out forms or generating theoretical diagrams. The models are created, but they don’t influence which controls get funded or how risk is communicated to leadership.

This disconnect usually stems from one core issue: modelling is being done without a clear understanding of its purpose.

If you're not tying threats to decisions, whether that’s about patching, architecture, or investments, you’re just modelling for modelling’s sake.

Threat modelling can serve three distinct purposes. First, it can be used to support vulnerability management, identifying software or infrastructure weaknesses so remediation can be prioritised. Second, it can aid asset prioritisation, helping clarify which business functions or systems are most critical and require stronger protections. But the most impactful use case is safeguard selection. When you map threats directly to the controls that can mitigate them, threat modelling becomes a strategic tool. It helps you show which safeguards matter most, where the gaps are, and what needs funding.

WHY YOU SHOULD START WITH WHAT THE COMMUNITY HAS BUILT

A frequent stumbling block within teams is trying to invent their own threat taxonomy from scratch. While it might seem more tailored or flexible, it’s an enormous task and one that rarely delivers better results than starting with a community-driven taxonomy.

Resources like the MITRE ATT&CK framework, NIST SP 800-30, and the CRF Threat Taxonomy provide mature,

www.techxmedia.com

well-vetted starting points. These taxonomies come with shared definitions and structures that are broadly understood across the industry. Using them not only saves time, but it allows for better benchmarking, easier collaboration with peers, and smoother integration with security tooling.

You don’t have to use them out-of-the-box. Most organisations tend to start with a community framework and adapt it to their unique risk posture, regulatory environment, or business structure. But starting from a blank slate isn’t just unnecessary, it can actively delay your ability to produce useful results.

A STRUCTURED, REPEATABLE APPROACH TO THREAT MODELLING

To make threat modelling genuinely useful, a five-step process that builds incrementally, supports automation, and scales well across different business units or system domains is recommended.

1.

The first step is to build a threat inventory. This involves collecting a list of relevant threats to your environment, based on both external intelligence and internal context.

That includes threat intelligence reports, incident history, and assessments from business unit leaders. It’s important to document not just the threats, but attributes like impacted assets, potential impact, and actor types. Critically, this inventory should be dynamic because threat landscapes change and your threat list needs to reflect that reality.

2.

Once you have your inventory, the next step is prioritisation. Here, models like DREAD (standing for Damage, Reproducibility, Exploitability, Affected Users, and Discoverability) can be helpful. You can enhance these scoring systems with multipliers for business factors such as regulatory exposure or alignment with executive concerns.

Oct-Nov 2025

37

SANS INSTITUTE

OPINION

The goal is not perfection, but consistency. A structured scoring approach helps you compare threats and decide which ones deserve attention first.

3.

The third step is mapping threats to safeguards. This is where threat modelling earns its keep. For each prioritised threat, identify which existing controls help mitigate it and where gaps exist. For example, if credential stuffing is a top concern, what’s in place? Is multi-factor authentication deployed universally? Is there anomaly detection around login behaviour? If not, you’ve just identified an investment priority.

4.

Fourth, look for opportunities to automate. Threat modelling often starts in spreadsheets, but that doesn’t scale. As maturity increases, migrate from spreadsheets to integrated tools that can pull real-time data. Ideally, these tools can ingest telemetry from your SIEM or endpoint solutions to reflect real-time data. The more your threat model reflects current-state reality, the more valuable it becomes for governance.

5.

Finally, and perhaps most importantly, communicate your findings in a way that leadership understands.

Executives don’t need to know every threat or scoring rubric.

it. If threat intelligence is stale or too generic, you’ll end up chasing ghosts. Similarly, not all steps can or should be automated. Judgment still matters.

Organisational culture can also be a blocker. Threat modelling surfaces uncomfortable truths about gaps in controls, exposure, or past incidents. Some teams resist that visibility. That’s why you should start small: choose one domain, one system, one application. Build the model, show the value, and expand from there.

The other operational reality is that threat models must evolve. If your threat model is a one-time deliverable from a consulting engagement, it’s obsolete the moment the ink dries. Treat it like an asset, something that needs care, feeding, and updates as the business and threat landscape change.

BUILDING GOVERNANCE THROUGH MODELLING

When implemented effectively, threat modelling is a governance tool. It connects technical security decisions to strategic priorities. It provides a defensible way to justify budgets. It aligns operational controls with business risk.

Perhaps most importantly, it gives security leaders a way to communicate risk without jargon. Instead of talking about "TTPs" or "zero-days," you’re talking about protecting business continuity, customer trust, and regulatory posture.

When you can quantify protection in terms of continuity, trust, and compliance, threat modelling becomes a language executives understand.

HOW TO BEGIN, RIGHT NOW

With shared threat frameworks, modelling turns from a checklist into a strategic enabler for security investments."

What they need is clarity: what are the top threats, what do we currently have in place, what are we missing, and what’s the business risk? Use dashboards, scorecards, or even simple heat maps. When you tie threats to decisions, especially financial ones, leadership pays attention.

THE REALITIES EVERY SECURITY TEAM SHOULD KNOW

Like any security process, threat modelling isn’t without its limitations. Your scoring is only as good as the data feeding

38

Oct-Nov 2025

If you’re just getting started, here’s a simple, repeatable starting point: Pilot the process with a single system or application, something important but manageable. Use a community taxonomy like MITRE ATT&CK or the CRF Threat Taxonomy.

Build an initial threat list of 10 to 20 items. Score them with a simple model. Map them to your current safeguards. Look for the obvious gaps. Then brief your leadership, not with the full model, but with a summary of the top threats, mitigation status, and options for addressing them.

Capture what worked, refine your process, and repeat in the next domain.

Threat modelling should never be a checkbox. It’s a powerful tool, when grounded, structured with care, and aligned to governance. By leveraging community templates, applying structured scoring, and connecting threats to controls, organisations can build a modelling practice that informs decisions, guides investments, and strengthens posture.

Start small. Stay consistent and practical. Let the results speak for themselves.

www.techxmedia.com

QUALYS

OPINION

HADI

JAAFARAWI Regional VP – MEA Qualys

40

Oct-Nov 2025

www.techxmedia.com

CYBERSECURITY HAS TO MOVE FROM TOOL TO CORE BUSINESS FUNCTION

The United Arab Emirates’ cybersecurity industry is expected to be a half-billion-dollar segment this year, with CAGR to 2030 estimated to be 6.88%. But as the nation’s public and private enterprises pour budgets into teams and tools, will they be substantially safer from infiltration and breaches? It is becoming clearer, day by day, that without instilling the proper business context into their threat postures, UAE organizations’ bottom lines will remain at risk. Qualys’ 2025 State of CyberRisk Assessment Report, coauthored with Dark Reading, showed nearly half of organizations to have a formal cyber-risk program, but most continue to treat cyber-risk as a technical problem rather than looking at it holistically and including business context. By focusing on vulnerabilities, update cycles, and severity scores they miss important questions on how badly each vulnerability, if exploited, would impinge on operations or customer service. This absence of context can end up being a weakness in the cybersecurity function.

REAL COSTS

Security leaders must have access to information on asset criticality, the hourly business costs of downtime, and the conditions that trigger regulatory fines. A decisive security investment will do little for the defense posture if this context is hidden from the CISO and their team.

Lukewarm ROI is only the beginning. Any breach is a blow to brand reputation. Lost trust among business partners and customers is not easy to rebuild. But in a modern digital business, impacts are even more immediate as they often tend to involve disruptions to core operations, which quickly lead to financial losses. As an example, ransomware can bring production lines down and cause delays in shipments. If a business works to any contractual deadlines, financial penalties soon follow.

Today, the way the enterprise conducts business has a direct bearing on cyber threats. Allowing employees to independently innovate is laudable, but failing to monitor IT assets leads to shadow IT – and now, shadow AI – which can escalate regulatory risk. This expansion of the attack surface can therefore be seen in a wider context, as an expansion of the risk surface.

The mapping process calls for 360-degree visibility of the environment. Each asset can then be cataloged. As this process occurs, the security team must be empowered to eliminate information silos. Teams, metrics, and risk-scoring must be unified. Qualys’ 2025 State of Cyber-Risk Assessment research showed around one in five organizations still rank vulnerabilities using single-factor severity scores, and a mere 18% update asset risk assessments at least monthly. These approaches are a drain on, and a waste of, resources and they leave critical risks unresolved.

REAL CONTEXT

To overcome the modern threat landscape, we must change how we manage cyber-risk. There are signs of maturing risk management among organizations, but we must work to build momentum. Enterprises must

www.techxmedia.com

embed structured processes and incorporate the most recent threat intelligence. CISOs must construct narratives that keep cyber-risk in the forebrains of board members.

UAE organizations must reimagine cyber-risk so they can manage it in a way that is appropriate to the cyber landscape we now face. They must consider the criticality of each asset, they must detect operational dependencies, and they must compute financial impact. Every decision must flow from a contextualized depot of information that has been collated and qualified by a range of stakeholders.

The era of reaction must be brought to a close in favor of a new strategic approach that includes automation and AI. The old methods will not protect us from modern threats.

AI can deliver actionable insights and make split-second decisions in real time. It can act as an additional security team member to coordinate responses across departments.

To cultivate the right message, security leaders must come up with ways to quantify business losses. They can do this by considering real-world scenarios and using these as thought models to tie cyber events to revenue losses, cost spikes, and potential incidences of non-compliance. This will generate the required impact metrics that will allow security teams to target vulnerabilities more effectively. The SOC will thus become an ROC (Risk Operations Center) – a more effective hub that automates the risk lifecycle from detection to remediation using the latest technologies, and that drastically reduces dwell time for critical exposures. The ROC, therefore, is less of a technical implementation center and more of a protector of business value.

REAL VALUE

The costly, ineffective days of cybersecurity silos must end. We must work towards making cybersecurity a business function that drives resilience. Data and tools and investments, while important, are no longer sufficient.

UAE enterprises need smarter, faster, decisions that protect their ability to compete.

Oct-Nov 2025

41

SOPHOS

OPINION

DEEPFAKES:

THE NEXT HUMAN VULNERABILITY FOR BUSINESSES? Synthetic audio and video generation technologies, known as deepfakes, have reached a critical threshold. Once mostly limited to social media entertainment or occasional political manipulation, they are now fully integrated tools in cyberattack tactics. This shift represents more than a technological evolution; it marks a transformation where human perception itself has become an attack surface. Recognizing a familiar voice or face is no longer a guarantee of authenticity.

In this context, businesses face a threat that relies less on raw technical skill and more on subtle manipulation of human behavior. Fraud campaigns now exploit cloned voices and manipulated videos to simulate authentic communications, deceiving even the most vigilant employees. In February 2024, an employee at a Hong Kong multinational transferred €24 million after being duped by a deepfake. The scam succeeded because everything appeared authentic: accent, rhythm, tone… The widespread availability of these tools, thanks to their low cost and accessibility, accelerates the industrialization of such attacks.

A TECHNOLOGICAL THREAT TURNED HUMAN

Attack simulations conducted with international organizations show that deepfakes are no longer a futuristic hypothesis but an established reality. A 2024 Anozr Way report projected deepfakes could increase from 500,000 in 2023 to 8 million in 2025. Deepfakes exploit a rarely anticipated cybersecurity vulnerability: our instinctive trust in human interactions. Cloned voices impersonate executives; videos generated from public content are embedded in credible scenarios to deceive experienced staff. Beyond technical sophistication, the industrialization of these practices is what should raise alarm.

Voice cloning now requires only a few seconds of publicly available audio, often available via public media such as YouTube or TikTok, allows artificial voices to be generated within minutes at low cost. These voices are then used in automated campaigns, including mass phone calls conducted by conversational agents simulating convincing human interaction. This paradigm shift moves the attack vector from IT systems

42

Oct-Nov 2025

to human behavior, exploiting trust, urgency, and voice recognition.

IDENTITY: THE NEW ATTACK SURFACE

AWARENESS, DOUBT, AND VERIFICATION: THE NEW PILLARS OF CYBERSECURITY

Across recent breaches, including those impacting M&S and JLR, we are witnessing a clear shift in attacker behavior. Adversaries no longer “hack in”, they simply “log in”. They obtain valid credentials through phishing, vishing, and social engineering campaigns, then use them to operate under the radar of traditional defenses. Deepfakes now extend this pattern by enabling the theft and imitation of identity itself. A cloned voice or AI-generated face can bypass skepticism, convincing employees they are interacting with a trusted colleague or executive.

Most companies have focused cybersecurity efforts on protecting systems and data. However, with deepfakes, humans become the entry point. These attacks exploit a major gap in current cybersecurity: the lack of verification reflexes in voice and video communications. While most organizations run phishing awareness campaigns via email, awareness of deepfakes remains minimal. Unlike phishing, now well understood, falsified calls or video conferences remain largely underestimated. The realism of deepfakes, especially under stress or urgency, obscures subtle cues that could raise alarms.

Identity has become the primary currency of access. As organizations strengthen their technical controls, attackers increasingly exploit human trust as the easiest route inside. This convergence of social engineering and AI-driven impersonation means the next wave of attacks won’t just target vulnerabilities in IT systems, they’ll target people.

Detection depends on noticing small inconsistencies such as timing delays or slightly robotic speech, signs that are easy to miss during a busy day. Organizations need to establish verification practices that go beyond technical controls. This includes contextual questions that only legitimate colleagues would know, answers that change regularly

www.techxmedia.com

(e.g., “When did we last meet?”), or confirmation through secondary channels. “Trust but verify” has long been a motto in cybersecurity, but identity-based attacks such as deepfakes make it more relevant than ever.

“Robocalls,” already widely used to target individuals with daily AI-driven calls, can also be exploited by adversaries for illegitimate purposes.

Here too, slight timing delays and intonation are key indicators to identify.

Therefore, team awareness can no longer be limited to email. It must include these new scenarios, train employees to recognize manipulations, and foster a culture of systematic verification. Trust must no longer be implicit, even when it seems natural.

The threat of deepfakes can no longer be seen as a technological curiosity or niche risk. It fundamentally challenges how companies manage trust, decision traceability, and communication security. Organizations must integrate these concerns into governance: crisis simulations, verificat ion proto cols, redundant information channels, and continuous training. More than a technological response, this re quires an organizational, cognitive, and cultural approach.

Against a digital illusion that relies on familiarity, only active vigilance can prevent the nex t att ack from coming… through the CEO’s voice.

www.techxmedia.com

BEN

JACOB

Tech Lead, Sophos Red Team Sophos – EMEA

Oct-Nov 2025

43

TENABLE

INTERVIEW

AI ATTACKS RISE, TENABLE FIRES BACK As Tenable defines itself as an Exposure Management company and has expanded its platform to address Enterprise AI, how should Middle East organizations rethink their cybersecurity approach to manage both traditional and emerging AIdriven risks?

Middle East organizations must pivot from a reactive "firefighting" security approach to a proactive exposure management discipline. This shift is mandatory because the velocity of AI-driven attacks renders traditional playbooks obsolete.

Exposure management provides the necessary overhaul by unifying visibility across the entire attack surface, including IT, cloud, OT, and new AI workloads.

This consolidated view allows security teams to identify and trace critical attack paths that span across fragmented silos, pre-emptively eliminating genuine business risk.

This strategic, risk-centric approach is vital for confidently protecting national digital agendas, such as Saudi Vision 2030 and Dubai's "D33."

What are the biggest cybersecurity challenges you hear from customers in the region right now and how is Tenable helping solve them?

The primary challenges Middle East customers face are security fragmentation and the weaponization of AI. Regional enterprises often contend with vendor sprawl, managing dozens of siloed tools across hybrid cloud and OT environments, which creates noise and dangerous blind spots.

Simultaneously, adversaries are using Generative AI to launch sophisticated, personalized attacks at machine speed.

44

Oct-Nov 2025

Tenable addresses this through its AI-powered Tenable One Exposure Management Platform. The platform collapses these silos to provide a unified, continuous view of risk.

Furthermore, Tenable leverages defensive AI to analyze trillions of data points to predict the most likely next attack vector. This predictive prioritization allows security teams to efficiently neutralize the critical exposures that attackers are most likely to exploit before a breach can occur.

Looking ahead, what do you think will define the next phase of cybersecurity in AI, cloud, or exposure management in the Middle East?

The next phase of cybersecurity in the Middle East will be defined by the evolution of exposure management into a self-driving system, transforming it from a system of record into a system of action. Securing ambitious digital foundations, such as giga-projects and cloud-centric economies, will require highly automated and predictive defense mechanisms. This involves integrating AI deeply, not just for risk identification, but for automating the remediation process.

Security systems will automatically check for patches, open tickets, recommend specific steps, and schedule follow-up scans, all within seconds. Crucially, this phase will also be marked by the necessity for technical leaders to translate cyber risk into quantifiable business risk, ensuring that security investment

is strategically prioritized to directly support the achievement of national economic diversification goals.

It is predicted that Agentic AI will become a powerful tool for cyber attackers. How is Tenable preparing to address this emerging threat?

Tenable is preparing for the threat of Agentic AI by fundamentally integrating defensive AI into its Exposure Management platform to counter machine-speed attacks.

Agentic AI will enable attackers to accelerate their attack development timelines from weeks to minutes. To counter this, Tenable utilizes its AI Exposure Engine to analyze the entire attack surface and power technologies like VPR 2.0 (Vulnerability Priority Rating). This defensive AI simulates attacker behavior, predicting which vulnerabilities are most likely to be weaponized next and where they fall within an exploitable attack path.

This predictive capability is key, allowing organizations to focus on the small percentage of exposures that are truly critical. By proactively eliminating high-likelihood risks, Tenable ensures customers maintain a critical advantage over AI-enhanced adversaries.

Tenable One gives organizations a clearer view of risk across IT, OT, cloud, and identity? How can critical infrastructure teams improve OT visibility and reduce risk without disrupting legacy systems?

Critical infrastructure teams, facing the convergence of IT and OT networks, must prioritize achieving deep situational awareness without

www.techxmedia.com

risking operational downtime. To improve OT visibility and reduce risk without disrupting sensitive legacy systems, organizations must adopt a unified framework.

Tenable's solutions enable this by providing passive visibility, which continuously monitors all connected OT assets without intrusive network scanning. The system then creates a unified risk context, crucial for understanding how a vulnerability in the IT network could be chained with a misconfiguration to compromise an OT system. This holistic view, supported by strong process integration between IT and OT teams, is not merely a defensive measure but a fundamental operational necessity to ensure the safety, continuity, and success of national development plans.

MAHER

JADALLAH

Vice President – MENA Tenable

www.techxmedia.com

Looking back at Black Hat in Saudi Arabia, what were the core themes Tenable focused on and what did you highlight during your participation?

At Black Hat in Saudi Arabia, Tenable centered its presence around the theme “Beyond the Silos, Exposure Management in a New Age of Risk.”

Co CEO Mark Thurmond delivered a keynote where he emphasized the fundamental shift the cybersecurity industry must embrace, noting that the traditional playbook is no longer effective in the age of AI. His session examined the three converging forces that organizations are now confronting, an expanding attack surface, fragmented defenses, and a rapidly maturing adversary empowered by AI. Across the three day event, Tenable showcased how exposure management serves as the essential master blueprint for securing digital transformation.

The company demonstrated how its platform brings siloed teams, tools, and data together into a unified system of action, helping organizations proactively eliminate the critical few risks that matter most. This approach ultimately supports the Kingdom’s broader digital foundations and national economic ambitions.

Oct-Nov 2025

45

NEWS

UAE APPROVES NATIONAL POLICY TO

BOOST DIGITAL SECURITY The United Arab Emirates announced the approval of its National Encryption Policy and the issuance of its executive regulation to enhance digital security. The policy calls on government entities to develop clear, officially approved plans to transition from traditional encryption methods to post-quantum cryptography.

Furthermore, the council will propose mechanisms to mitigate quantum computing risks to sensitive systems with weak cryptographic components. It will conduct technical and analytical assessments to support government and private entities in evaluating the readiness and integrity of digital systems prior to wide-scale adoption.

This step aims to support a safer and more technologically prepared future amid rapid advancements in quantum computing. The milestone reflects the UAE leadership’s vision to build secure and modern digital infrastructure.

It also strengthens the nation’s position as a global hub for artificial intelligence and digital innovation.

The council’s services are structured around four main testing and verification pillars:

The UAE Cybersecurity Council revealed that it will oversee national migration efforts. The council will work closely with government bodies to ensure successful implementation of post-quantum encryption standards. It also aims to reinforce data protection and safeguard digital assets according to international best practices.

The council reported that it is responsible for strengthening national information security, protecting data from unauthorized access, and proposing legislation, policies, and regulations related to encryption. It also sets procedures and standards to ensure proper implementation, with recommendations submitted to the National Security Advisor for approval.

46

Oct-Nov 2025

• AI reliability testing • Software reliability testing • Hardware reliability testing • Signal reliability testing Dr. Mohammed Al-Kuwaiti, Head of Cybersecurity for the UAE government, stated that the approval represents a major advancement in the national cybersecurity framework. He emphasized that it reflects the leadership’s commitment to strengthening the UAE’s status as a trusted global hub for artificial intelligence and advanced technologies.

He added that encryption and information security have become critical challenges for countries, institutions, and communities amid comprehensive digital transformation.

The policy highlights the increasing reliance on secure and resilient digital infrastructure.

www.techxmedia.com

THE CYBER WORLD CONVERGES IN RIYADH Black Hat MEA 2025 concluded in Riyadh at the Riyadh Exhibition and Convention Centre in Malham where the focus centered on defending digital frontiers and decoding emerging cyber threats.

Signature features returned including Black Hat Briefings which showcased cutting edge research and vulnerability disclosures from ethical hackers. Arsenal Labs featured live demonstrations of new open source security tools.

This year’s edition delivered the world’s largest Cyber Activity Zone which brought ship hacking simulations, cyber escape rooms, and real world mission based challenges to the region’s cybersecurity community.

The Capture The Flag competition drew significant participation once again, remaining the region’s largest hacking challenge with a prize pool of more than SAR 1 million. The CyberSeed Startup Competition continued to spotlight regional cybersecurity startups and connected them with global investors.

Co organized by Tahaluf in partnership with the Saudi Federation for Cybersecurity, Programming and Drones, Black Hat MEA continued its rise as one of the world’s largest cybersecurity gatherings. The 2024 edition had previously reported a record 45,000 participants from more than 120 countries.

The 2025 event delivered more than 200 hours of content and hosted over 300 speakers. Keynote sessions featured Dr Rumman Chowdhury, CEO and Co Founder of Humane Intelligence, Devon Bryan, Global Chief Security Officer at Booking Holdings, and Todd Hemmen, Deputy Assistant Director at the FBI. Throughout the conference organizers highlighted AI driven threat detection, incident response advancements, regulatory updates, and resilience strategies. They reiterated that global collaboration continues to shape the future of cybersecurity practice.

www.techxmedia.com

Organizers also expanded investor programs, startup showcases, and talent development initiatives designed to attract investment, foster innovation, and upskill the region’s cybersecurity workforce.

Annabelle Mander, Executive Vice President of Tahaluf, reiterated that cybersecurity is now the foundation of global trust and added that Saudi Arabia is shaping digital resilience from Riyadh. Steve Durning, Portfolio Director, noted that each edition continues to push the boundaries of what a cybersecurity event can deliver, stating that their goal is to keep the community curious, fearless, and connected.

As cyber threats advance, Black Hat MEA 2025 closed as a key platform for global collaboration. The event translated ideas into action and partnerships into progress, reinforcing its role in defining the next era of cybersecurity.

Oct-Nov 2025

47

NEWS As part of the 27th edition of Intersec, taking place from 12–14 January 2026 at the Dubai World Trade Centre, the InCyber Briefing will provide critical insights for CISOs, cybersecurity strategists, and digital risk leaders. The briefing will focus on AI governance, post-quantum readiness, supply chain resilience, and cyber risk reporting.

A keynote session by Luqman Kondeth, Director of Cybersecurity at New York University Abu Dhabi, titled “The Oracle in the System: A Village Parable for Governing AI,” will highlight practical lessons in trust, oversight, and responsible AI innovation. Kondeth emphasized that AI governance must be continuous, integrated, and human-centred, supporting ongoing monitoring and risk assessments rather than periodic reviews.

LUQMAN

KONDETH

Additionally, consulting firm Kearney will host a closed-door roundtable, “Defending the Digital Backbone: Securing National Infrastructure in the Era of AI and Hybrid Threats.” Insights from this session will be compiled into a white paper exploring intelligencedriven resilience and proactive cybersecurity measures.

AI PUSHES UAE CYBERSECURITY TO

Dishan Isaac, Show Director of Intersec at Messe Frankfurt Middle East, noted that AI, automation, and digitization are reshaping the cybersecurity landscape. The InCyber Briefing equips decision-makers with practical tools, frameworks, and strategies to govern AI effectively while safeguarding organizations against emerging threats.

Director of Cybersecurity New York University Abu Dhabi

USD 1.29 BILLION The UAE’s cybersecurity market is set to surge from US$620 million in 2024 to an estimated US$1.29 billion by 2030. Analysts report this growth is driven by AI security analytics, Zero Trust architecture, and strong government initiatives.

According to ResearchAndMarkets, the

48

Oct-Nov 2025

sector’s expansion is fueled by digital transformation, rising cyber threats, and government support for digital infrastructure. Key initiatives include the UAE National Cybersecurity Strategy and the Cybersecurity Council, which are seen as major growth catalysts. The market is expected to grow at a CAGR of 12.8% until 2030.

• •

•

Intersec 2026 will host over 1,400 exhibitors from 60+ countries.

Expected attendance is 50,000 visitors across 67,000 sqm of exhibition space.

The event is under the patronage of His Highness Sheikh Mansoor Bin Mohammed bin Rashid Al Maktoum and supported by Dubai Civil Defense and SIRA.

www.techxmedia.com

CYBER AND MEDIA

LEADERS ADVANCE DIGITAL RESILIENCE The UAE Cybersecurity Council reported that its Head, Dr. Mohamed Hamad Al Kuwaiti, received Abdulla bin Mohammed bin Butti Al Hamed, Chairman of the National Media Office and Chairman of the UAE Media Council, at the Council’s headquarters in Abu Dhabi.

The meeting focused on enhancing cooperation between the UAE Cybersecurity Council, the National Media Office, and the UAE Media Council. The discussion aimed to support national efforts to build a secure and sustainable digital ecosystem. Dr. Jamal Al Kaabi, Director-General of the National Media Office, was also present.

According to the UAE Cybersecurity Council, the visit reflected ongoing cooperation among government entities committed to protecting society from digital threats and supporting the nation’s cybersecurity framework as a key part of its digital transformation journey.

Dr. Al Kuwaiti expressed his appreciation for Abdulla Al Hamed’s visit and his interest in learning more about the Council’s initiatives to strengthen cybersecurity across the UAE. During the meeting, Dr. Al Kuwaiti reviewed the Council’s awareness programs designed to promote a cybersecurity culture among individuals and institutions.

He said the Council continues to build a safe and

www.techxmedia.com

sustainable digital environment that supports the country’s transformation efforts.

Abdulla Al Hamed was briefed on key achievements of the UAE Cybersecurity Council, including initiatives to protect digital infrastructure, enhance digital trust, and counter cyberattacks.

He commended the UAE Cybersecurity Council for its work under the leadership of Dr. Al Kuwaiti in developing an advanced digital system aligned with the nation’s future goals in artificial intelligence and secure digital transformation. Al Hamed highlighted the role of national media in supporting cybersecurity by: • •

Raising public awareness on safe technology use Promoting digital responsibility across society

At the conclusion of the visit, both Dr. Al Kuwaiti and Al Hamed reaffirmed their commitment to continued cooperation between the UAE Cybersecurity Council, the National Media Office, and the UAE Media Council. They emphasized the need to expand digital awareness, unify federal and local efforts, and strengthen cybersecurity measures to protect society and its members.

Oct-Nov 2025

49

NEWS

FAMILIES AND TECH GIANTS

UNITE FOR KIDS’ SAFETY The Abu Dhabi Early Childhood Authority (ECA), in collaboration with the Ministry of Education (MoE), has announced a series of awareness sessions and workshops focused on Digital Wellbeing. The sessions will be held under the UAE Children’s Digital Wellbeing Pact and in parallel with preparations for Abu Dhabi Early Childhood Week 2025.

Aligned with the theme “Raising Safe and Smart Digital Natives”, the initiative aims to help students, families, and educators support children in using technology safely and responsibly.

The sessions will promote awareness on screen time management, online safety, and positive digital habits.

ECA reported that Meta, in collaboration with Digital Bridge, will lead a set of workshops in schools.

These workshops will help families navigate technology by addressing topics such as managing screen time, supporting children online, and encouraging healthy digital habits at home.

In addition, e& UAE, the telecom arm of global technology group e&, will host an online session on cybersecurity.

The session will guide students on using the internet safely, treating others with respect, and protecting themselves from cyberbullying. It aims to strengthen students’ confidence and promote mindful, safe use of digital platforms.

The UAE Children’s Digital Wellbeing Pact was signed during the World Government Summit 2025. It is led by the Digital Wellbeing Council and the ECA, in coordination with the Office of International Affairs at the Ministry of Interior, the Telecommunications and Digital Government Regulatory Authority (TDRA), and the Office of Artificial Intelligence, Digital Economy, and Remote Work Applications.

According to reports, the Pact’s signatories include Meta, Google, TikTok, Snapchat, X, Yango Play, Samsung, e& UAE, and du. Together, they aim to co-create safer and more responsible digital experiences for children and youth in the UAE. The initiative highlights the country’s ongoing efforts to enhance Digital Wellbeing, ensure online safety, and build a positive digital culture for future generations.

50

Oct-Nov 2025

www.techxmedia.com

QR SAFETY IN FOCUS:

DESC’S SCAN SMART CAMPAIGN During Cybersecurity Awareness Month, the Dubai Electronic Security Centre (DESC) ran the “Scan Smart” campaign from October 24 to 30, 2025, aimed at raising awareness, empowering citizens with cybersecurity knowledge, and preventing QR code-related threats across all audience groups.

As QR codes become increasingly common in restaurants, retail outlets, hotels, and events, DESC highlighted the growing risk of tampered or malicious codes. Threat actors can alter public QR codes, redirecting users to phishing sites, installing malware, or stealing personal data. Globally, over 4.2 million attempts to forge QR codes were detected in the first half of 2025, underlining the need for safer scanning habits.

The campaign equipped individuals and businesses with tools to identify legitimate QR codes, avoid tampered ones, and report suspicious activity, supporting Dubai’s broader efforts to maintain a secure digital environment.

cybersecurity knowledge, with the goal of making Dubai a safer cyberspace for everyone.

“Scan Smart” featured an interactive kiosk and a microsite educating the public on safe QR code practices, alongside RZAM, DESC’s free browser extension that detects suspicious websites following QR code scans.

A network of F&B venues across Dubai participated as “Scan Smart Partners,” displaying campaign-branded stickers and table tents to encourage safe scanning while offering free coffee and exclusive discounts. The collaboration turned cafés into micro awareness hubs, where customers were urged to verify QR codes before scanning and report suspicious activity through official channels.

The campaign aligns with the UAE’s Year of Community initiative, promoting collaboration, safer online practices, and DESC’s mission to protect Dubai’s digital ecosystem.

Yousuf AlShaibani, Chief Executive at DESC, said the initiative reflects the centre’s commitment to providing practical

www.techxmedia.com

Oct-Nov 2025

51

SENTINELONE

INTERVIEW

AUTONOMOUS

SECURITY IN ACTION What innovations did SentinelOne showcase at Black Hat MEA this year, and what was the significance of the event for the region?

At Black Hat MEA 2025, SentinelOne showcased the full power of the Singularity Platform, our AI-powered unified cybersecurity platform that brings endpoint, identity, cloud, and data protection into a single autonomous experience. A major highlight was our Autonomous SOC vision, powered by three breakthroughs. Purple AI, our agentic generative AI, demonstrated deep security reasoning, reduced noise, elevated true threats, and guided analysts with contextual, explainable insights. AI-SIEM extended this intelligence across the enterprise by unifying data ingestion, correlation, and detection into real-time analytics. Singularity Hyperautomation enabled nocode workflows that accelerated response and eliminated manual tasks.

We also highlighted our full Cloud Security portfolio, including Cloud Workload Protection, Cloud Native Security, Cloud Data Security, and Cloud Security Posture Management, all designed to secure applications, workloads, and cloud-stored data at scale.

Critically, we demonstrated not only how AI strengthens cybersecurity, but also how to secure AI itself, protecting models, data pipelines, and AI-driven applications from emerging threats. Black Hat MEA proved to be an important platform for engaging regional leaders who require autonomous, unified security to support their rapidly evolving digital landscapes.

How is agentic AI shaping the evolution of cybersecurity?

Agentic AI is redefining cybersecurity by moving the industry from reactive investigation to autonomous decision-making. Traditional AI helped analysts detect anomalies more quickly, but agentic AI goes further; it reasons, acts, and adapts. It understands intent, evaluates context, and takes guided steps to resolve threats with minimal human intervention. This fundamentally changes how security teams operate, making real-time response, automation, and precision at scale achievable for every enterprise.

52

Oct-Nov 2025

In the Middle East, where organizations are rapidly adopting cloud, Generative AI, and modern identity architectures, agentic AI proved to be a force multiplier. It enables security teams to overcome talent shortages, reduce operational fatigue, and focus on high-value tasks instead of chasing alerts. Ultimately, agentic AI is becoming the foundation of the Autonomous SOC, where speed, context, and intelligence converge to outpace modern adversaries With AI-driven attacks increasing, how is SentinelOne helping enterprises build stronger autonomous security ecosystems?

AI-driven attacks are evolving faster than traditional security teams can respond, and SentinelOne’s AI-native approach has become essential. We help enterprises build autonomous security ecosystems by unifying endpoint, identity, cloud, and data protection into a single, intelligent platform powered by real-time AI. Our AI-SIEM provided deep, continuous visibility by correlating signals across the entire environment and detecting sophisticated threats that would overwhelm human analysts. Purple AI added agentic reasoning, guiding teams with contextual insights, reducing noise, elevating true threats, and initiating guided response actions.

Singularity Hyperautomation transformed these insights into immediate action, enabling organizations to automate investigation and remediation without manual intervention.

What cybersecurity trends did CISOs in the Middle East observe at Black Hat MEA for 2026?

CISOs in the Middle East are facing a cybersecurity landscape defined by three major shifts: AI everywhere, identity as the new perimeter, and cloud-scale threats accelerating beyond human capacity. The rise of AIdriven attacks, from automated reconnaissance to realtime exploitation, is pushing organizations to adopt AI-native defenses, agentic reasoning, and autonomous response. Equally critical is the need to secure AI itself, including protecting models, training data, and AI-enabled applications from manipulation.

Identity compromise remains the region’s most exploited attack path, making Identity Threat Detection and Response

www.techxmedia.com

(ITDR) a top priority as organizations adopt Zero Trust principles. Cloud adoption across financial services, government, and energy continues to drive demand for Cloud Security.

Finally, evolving regulatory frameworks across the Middle East are pushing CISOs to prioritize unified visibility, governance, and AI-based controls that reduce operational complexity while strengthening resilience.

How is SentinelOne supporting the region’s push for stronger cyber skills, local expertise, and digital resilience?

SentinelOne remains deeply committed to strengthening cybersecurity capabilities across the Middle East by investing in skills development, regional expertise, and long-term digital resilience. We work closely with enterprises, government entities, and universities to deliver hands-on programs that build practical SecOps, threat-hunting, cloud security, and AI security skills.

Our regional teams lead custom workshops, ThreatOps labs, and advanced cybersecurity training sessions that help practitioners develop expertise in AI-driven defense, identity protection, and cloud-native security.

Initiatives such as CyberSafe University and partner enablement programs are empowering local talent to master next-generation security technologies.

Agentic AI continues to be a key accelerator in this journey. Integrated across the Singularity Platform, it provides guided investigations, contextual reasoning, and automated recommendations, enabling analysts to learn faster, understand attacks more deeply, and elevate their decisionmaking. It acts as a real-time mentor, addressing talent shortages, enhancing analytical capability, and improving overall security team proficiency.

www.techxmedia.com

EZZELDIN

HUSSEIN Regional Senior Director Solution Engineering SentinelOne

Oct-Nov 2025

53

Trend Tren

catch all the ACTION, INSIGHTS a

54

Oct-Nov 2025

ding

and UPDATES across our socials.

Oct-Nov 2025

55

SMART. SECURE. AIIREADY FOR BUSINESS.

14” 2.5K 144 Hz anti-glare display

Intel® Core™ Ultra processors (Series 2) NPU Upto 47 TOPS

AI Expert Meet

ExpertCool thermal solution

AY 05 - 07 M2026 DUBAI EXHIBITION CENTRE (DEC), EXPO CITY

POWERED BY

Featuring the Most Innovative

CYBERSECURITY STARTUPS

Your startup journey to success STARTS HERE

#gisecnorthstar cyber.gisec.ae