Connect with us

GISEC

GISEC Global Celebrates Women in Cybersecurity Ahead of Annual Exhibition

Published

on

As the Middle East’s largest and most impactful cybersecurity event, GISEC Global continues to provide a solid platform and expand the opportunities for women in the field, fueling the growth of a diverse industry that is set to transform the world’s digital behaviours. GISEC Global 2024 is spotlighting some of the most influential women in cybersecurity who will take centerstage at the Inspire conference, the most awaited annual programme gathering female leaders and industry experts, during the three-day cybersecurity showcase from 23-25 April 2024 at the Dubai World Trade Centre.

As pioneers forging a complex and dynamic career path, seasoned security architect Alina Tan, esteemed cybersecurity advisor Judy Ngure, and cybersecurity influential digital creator Caitlin Sarian are among the headliners and stand as powerful symbols of female perseverance, talent, and advocacy. Their unique contributions to the cybersecurity space have seen ground-breaking impact across the automotive industry, corporate landscape, and social media – while collectively, they continue to expand the industry’s understanding of inclusivity and the subsequent potential for even greater innovation.

Judy Ngure, Founder and CEO of Bug Bounty Box

A prominent presence in Singapore’s automotive cybersecurity industry – and one of the Top 30 Women in Security in ASEAN – Alina Tan is a powerful representation of female success in a largely male-dominated field. Her passion for cybersecurity stemmed from a personal interest in motorsport, which saw her leverage the synergy between the two to establish a specialised interest group, Car Security Quarter, dedicated to automotive security within her local community. She also spearheads the Singapore Chapter of the Automotive Security Research Group, a global non-profit that promotes knowledge sharing and the development of security solutions.

“I firmly believe in the power of representation and visibility,” said Tan. “Through my experiences, insights, and accomplishments, I aim to demonstrate that women can excel in cybersecurity and thrive in diverse roles within the industry. Notable initiatives in the Middle East, such as GISEC Global, feature dedicated stages for Women in Cybersecurity, providing a large-scale platform to showcase talent and inspire a new generation of women in STEM (Science, Technology, Engineering, and Mathematics).”

Tan will be joined in the Inspire conference at GISEC Global 2024 by Judy Ngure, the founder and CEO of Bug Bounty Box, a platform to help security leaders manage vulnerabilities. A cybersecurity practitioner for over five years, she sits on various advisory boards across Africa, supporting organisations in furthering diversity in the cybersecurity field. Ngure also co-authored a book titled “African Women in Security: Remarkable Women Moving Cybersecurity in Africa”, which aims to celebrate women in the field, demonstrate their value and inspire other women to enter the industry.

Caitlin Sarian, Founder and Executive Director of Cybersecurity Girl

Caitlin Sarian, also known as Cybersecurity Girl, is a dominant cybersecurity influencer with a comprehensive career history – including a decade of consulting experience at the likes of EY and a previous role at TikTok’s Global Cybersecurity Advocacy and Culture team. As well as attending the Women in Cybersecurity Roundtable, Caitlin will be leading a talk titled ‘The flawed path: debunking the efficacy of current cybersecurity training approaches and how we can improve our future,’ in which she hopes to relay the urgent need to overhaul outdated education methods in favour of training strategies that prioritise real-world application and critical thinking.

Tan, Ngure, and Sarian agree that for many young women, there may be a sense of not receiving the support, recognition, and validation they deserve for their contributions to cybersecurity. A lack of inclusive programmes and opportunities for professional growth often results in feelings of being side-lined, which can dampen enthusiasm for pursuing a career in the industry.

An especially significant barrier to upskilling women in cybersecurity is a pervasive lack of understanding of what the field entails. While many assume it is strictly about coding, it has proven to be a multifaceted profession that requires a variety of skills – from analytical expertise and problem-solving to communication and creativity. An overwhelming number of available bootcamps and online courses can also make it difficult for beginners to start, with the information overload often leading to confusion and discouragement before women have even stepped foot into the industry.

Alina Tan, Security Architect and Founder of Division Zero’s Car Security Quarter

“The biggest challenge is getting women excited about technical topics in cybersecurity because it looks like a very male-dominated environment – which it is,” said Ngure. “The other key challenge is retaining women in the cybersecurity field; I have seen many women move from technical cyber roles to non-technical jobs. I do encourage women to upskill compared to moving because we need more women active in the industry’s technical leadership positions.”

Sarian agreed saying, “Increased female participation in cybersecurity is not just a matter of equity – it’s a strategic necessity. The field of cybersecurity benefits immensely from diversity, as it brings different perspectives, ideas, and approaches to problem-solving. Women, with their unique experiences and viewpoints, can drive innovation and enhance the effectiveness of cybersecurity measures. As the industry becomes more inclusive, we can expect a more holistic approach to security challenges – one that has the potential to result in more robust and comprehensive security strategies that strengthen our defence against cyber threats.”

Addressing these challenges can be achieved through a variety of avenues, largely led by governments and enterprises, to create more opportunities for women in tech, cybersecurity, and defence. On a corporate level, enterprises can adjust their recruitment and hiring processes to eliminate any unconscious biases, as well as partner with female-focused organisations to support with targeted outreach efforts.

Mentorship and development are also essential to ensure that women are receiving the senior support they need and are positioned to undertake ongoing training and development to fuel their career growth. Awareness and advocacy remain top-of-mind and play a crucial role in championing female role models in the industry, highlighting their achievements and contributions to the wider cybersecurity community. Awards ceremonies, media campaigns, and conferences can stir conversations around female success and entrepreneurship in the industry.

Governments are able to further drive accessibility through education and training initiatives that encourage girls to pursue STEM education and careers, along with dedicated scholarships and grants to fund their academic journey. At a higher level, policy and legislation can better equip businesses to deliver equal pay and opportunity – as well as flexible working policies to attract and retain top female talent – while cross-industry partnerships serve as a powerful tool for collaboration to foster a more diverse and inclusive tech workforce.

Cyber Security

Positive Technologies Reports 80% of Middle East Cyberattacks Compromise Confidential Data

Published

on

A new study by cybersecurity firm Positive Technologies has shed light on the evolving cyber threat landscape in the Middle East, revealing that a staggering 80% of successful cyberattacks in the region lead to the breach of confidential information. The research, examining the impact of digital transformation, organized cybercrime, and the underground market, highlights the increasing exposure of Middle Eastern nations to sophisticated cyber threats.

The study found that one in three successful cyberattacks were attributed to Advanced Persistent Threat (APT) groups, which predominantly target government institutions and critical infrastructure. While the rapid adoption of new IT solutions is driving efficiency, it simultaneously expands the attack surface for malicious actors.

Cybercriminals in the region heavily utilize social engineering tactics (61% of cases) and malware (51%), often employing a combination of both. Remote Access Trojans (RATs) emerged as a primary weapon in 27% of malware-based attacks, indicating a common objective of gaining long-term access to compromised systems.

The analysis revealed that credentials and trade secrets (29% each) were the most sought-after data, followed by personal information (20%). This stolen data is frequently leveraged for blackmail or sold on the dark web. Beyond data theft, 38% of attacks resulted in the disruption of core business operations, posing significant risks to critical sectors like healthcare, transportation, and government services.

APT groups are identified as the most formidable threat actors due to their substantial resources and advanced technical capabilities. In 2024, they accounted for 32% of recorded attacks, with a clear focus on government and critical infrastructure. Their activities often extend beyond traditional cybercrime, encompassing cyberespionage and even cyberwarfare aimed at undermining trust and demonstrating digital dominance.

Dark web analysis further revealed that government organizations were the most frequently mentioned targets (34%), followed by the industrial sector (20%). Hacktivist activity was also prominent, with ideologically motivated actors often sharing stolen databases freely, exacerbating the cybercrime landscape.

The United Arab Emirates, Saudi Arabia, Israel, and Qatar, all leaders in digital transformation, were the most frequently cited countries on the dark web in connection with stolen data. Experts suggest that the prevalence of advertisements for selling data from these nations underscores the challenges of securing rapidly expanding digital environments, which cybercriminals are quick to exploit.

Positive Technologies analyst Alexey Lukash said, “In the near future, we expect cyberthreats in the Middle East to grow both in scale and sophistication. As digital transformation efforts expand, so does the attack surface, creating more opportunities for hackers of all skill levels. Governments in the region need to focus on protecting critical infrastructure, financial institutions, and government systems. The consequences of successful attacks in these areas could have far-reaching implications for national security and sovereignty.”

To help organizations build stronger defenses against cyberthreats, Positive Technologies recommends implementing modern security measures. These include vulnerability management systems to automate asset management, as well as identify, prioritize, and remediate vulnerabilities. Positive Technologies also suggests using network traffic analysis tools to monitor network activity and detect cyberattacks. Another critical layer of protection involves securing applications. Such solutions are designed to identify vulnerabilities in applications, detect suspicious activity, and take immediate action to prevent attacks.

Positive Technologies emphasizes the need for a comprehensive, result-driven approach to cybersecurity. This strategy is designed to prevent attackers from disrupting critical business processes. Scalable and flexible, it can be tailored to individual organizations, entire industries, or even large-scale digital ecosystems like nations or international alliances. The goal is to deliver clear, measurable results in cybersecurity—not just to meet compliance standards or rely on isolated technical fixes.

Continue Reading

GISEC

ManageEngine @ GISEC Global 2025: AI, Quantum Computing, and Ransomware Form Part of Cybersecurity Outlook for 2025

Published

on

As AI-powered attacks and quantum computing reshape the cyber threat landscape, organizations must rethink traditional defense strategies. In an exclusive interview, Sujoy Banerjee, Associate Director at ManageEngine, reveals how businesses can prepare for 2025’s most critical threats—from AI-generated phishing scams to quantum-decrypted ransomware (more…)

Continue Reading

GISEC

Positive Technologies @ GISEC Global 2025: Demonstrating Cutting-Edge Cyber Threats and AI Defense Strategies

Published

on

At GISEC Global 2025, Positive Technologies showcased live demonstrations of sophisticated hacking techniques while emphasising the growing role of AI in both cyber attacks and defense. In an exclusive interview with Security Review, Ilya Leonov, the Regional Director at Positive Technologies revealed insights about the Middle East’s evolving threat landscape, their work with regional governments, and why investing in human expertise remains critical despite advancing technologies (more…)

Continue Reading
Advertisement

Follow Us

Trending

Copyright © 2021 Security Review Magazine. Rysha Media LLC. All Rights Reserved.