Cyber Security
Can’t Keep Up, Can’t Keep Out: Fortinet Report Links Skills Shortage to More Breaches
A new report by Fortinet, a leading cybersecurity company, reveals a growing concern for businesses worldwide: the cybersecurity skills gap. The report, titled “2024 Global Cybersecurity Skills Gap Report,” surveyed IT and cybersecurity decision-makers from across the globe and found that a significant shortage of qualified professionals is putting organizations at risk.
“The findings from our 2024 Cybersecurity Skills Gap Report highlight a critical issue facing organizations in the United Arab Emirates,” says Alain Penel, VP – Middle East, Turkey and CIS, at Fortinet. “Close to 58% of IT decision-makers cited the lack of training and upskilling opportunities as being their biggest challenge. This underscores the urgent need for enhanced cybersecurity training and certification programs, as 94% of our respondents said they were ready to pay to get their employees cybersecurity certified. It is also encouraging to see that 92% of IT decision-makers actively women into security roles, while 74% had plans to introduce diversity goals over the next 2-3 years. Fortinet is committed to supporting organizations to build a resilient cybersecurity posture by providing comprehensive training and certification programs through our pledge to train 1 million people in cyber by 2026. We aim to empower professionals with the necessary skills to protect against evolving cyber threats and secure their organizations effectively.”
Key findings:
- Breaches on the Rise: Nearly 90% of surveyed organizations reported experiencing a security breach in the past year, with many attributing it, at least partially, to a lack of cybersecurity expertise. This number has been steadily increasing over the past few years.
- Leaders Held Accountable: Cybersecurity incidents have a more substantial financial impact, with over half of respondents experiencing losses exceeding $1 million. Additionally, executives are increasingly facing consequences for breaches, with over 50% reporting directors or executives being penalized.
- Cybersecurity a Boardroom Priority: The report highlights a positive trend: boards of directors recognise cybersecurity as a critical business issue. Nearly all respondents (97%) said their boards view cybersecurity as a top priority.
- Certifications Matter: The report finds that employers highly value certifications as a way to validate cybersecurity skills. Over 90% of respondents said they prefer hiring candidates with certifications, and nearly 90% would be willing to pay for employee certifications.
- Finding Qualified Talent Remains Difficult: Despite the emphasis on certifications, more than 70% of respondents reported difficulty finding candidates with the necessary technical certifications.
- Diversifying the Workforce: Organizations are looking beyond traditional hiring pools to fill open positions. While diversity hiring goals remain steady, the report finds a slight decrease in the percentage of female and veteran hires compared to previous years.
- Three-Pronged Approach to Security: The report emphasizes a multi-faceted approach to cybersecurity that includes:
a. Training and certifications for IT and security teams
b. Building cybersecurity awareness among all employees
c. Implementing effective security solutions
The report paints a concerning picture of the cybersecurity landscape. With the growing threat of cyberattacks and the increasing cost of breaches, businesses need to take immediate steps to address the skills gap. This includes investing in training and certifications for their employees, diversifying their hiring pools, and implementing a comprehensive cybersecurity strategy.
Cyber Security
AmiViz Champions Cybersecurity Innovation at Leading MENA Events
AmiViz has announced its successful participation in two key regional cybersecurity conferences: MENA ISC 2024 in Saudi Arabia, and CYSEC UAE 2024 in the UAE. These events have served as a platform for AmiViz to collaborate with its top vendors, including Bitsight, Cequence Security, Picus Security, AlgoSec, BlackBerry, Check Point, Tenable, Asimily, and Threatcop, to showcase cutting-edge cybersecurity technologies and solutions.
Throughout these events, AmiViz engaged deeply with partners and customers, gaining invaluable insights into the unique cybersecurity challenges faced in the region. The focus was on promoting new technologies that address these challenges and enhance security protocols for businesses operating in the dynamic Middle Eastern market.
“Our presence at the MENA ISC 2024, and CYSEC UAE 2024 has been a remarkable opportunity for us to not only present our innovative solutions but also to understand firsthand the needs and pain points of our clients,” stated Ilyas Mohammed, COO at AmiViz. “Collaboration with our key vendors has allowed us to offer a comprehensive suite of cybersecurity products and services that cater specifically to the complexities of this region.”
AmiViz’s participation in these events underscores its commitment to advancing cybersecurity readiness and resilience across the Middle East. By leveraging strategic partnerships with leading global vendors, AmiViz continues to bring state-of-the-art cybersecurity solutions to the forefront, helping businesses protect their critical assets against increasingly sophisticated cyber threats.
AmiViz, along with its key vendors, will continue participating in major tech events, with plans for a strong presence at GITEX next month. Following GITEX, the company is gearing up for Black Hat in Saudi Arabia this November, showcasing its cutting-edge cybersecurity solutions to the region.
Cyber Security
UAE and Saudi Arabia Face Unprecedented 70% Rise in Threats: Positive Technologies
Positive Technologies experts have unveiled comprehensive research on the shadow market of cybercriminal services targeting the Gulf countries. The UAE and Saudi Arabian organizations remain in the crosshairs of cybercriminals, and over half of all posts on darknet forums are about selling data and access to local companies’ infrastructures. Researchers have highlighted a sharp increase in the free distribution of such data on the dark web, along with a surge in reports of DDoS attacks targeting the public sector and other industries. One in five ads analyzed was related to buying or selling access, with two-thirds available for under $1,000.
According to the research, cybercriminals remain focused on the two largest economies in the region—the UAE (40% of all posts) and Saudi Arabia (26%). The spotlight on darknet forums is on the public sector, which accounted for 21% of all analyzed posts. Most of the data (63%) related to regional government institutions was published for free as part of hacktivist attacks. Next in line for most popular on the dark web are commerce (16% of all ads), the service sector (15%), and financial institutions (13%).
Amid geopolitical tensions, hacker groups have ramped up calls for DDoS attacks and breaches to disrupt government institutions in the region. In the first half of 2024, the number of reports on the results of DDoS attacks on the dark web surged by 70% compared to the same period in 2023. Beyond the public sector, hacktivists also targeted the financial and transportation sectors.
According to the research, 33% of all the analyzed ads were linked to data breaches. One-third of these messages were about selling information. In these ads, criminals primarily offered databases stolen from major commerce companies, with an average cost of $2,300.
Positive Technologies analyst Anastasiya Chursina commented, “When compared to our previous research over a similar period, the share of freely distributed data almost doubled (up to 59%). This allows criminals to broaden the profiles of potential victims for targeted attacks. If the victim refuses to pay the ransom, both ransomware groups, as well as hacktivists (whose goal is to draw public attention to a political stance rather than just receive financial gain), can distribute data for free.”
Accessing company information resources is the second most common type of dark web ads, making up 21% of all listings. According to the research, in 70% of all cases, access can be bought for less than $1,000. The vast amount of access-for-sale ads on the darknet and their low cost make it easier for cybercriminals to gain initial access and launch attacks on organizations in the region.
Positive Technologies recommends that companies build their defences based on result-driven cybersecurity, using modern tools such as application-level firewalls, including cloud versions, network traffic analysis systems, solutions for monitoring information security events and managing incidents, as well as metaproducts.
Cyber Security
BotGuard OÜ to Offer Live Demos at GITEX GLOBAL 2024
BotGuard OÜ will present its intuitive, user-friendly cybersecurity solution at GITEX GLOBAL 2024, focusing on effective bot protection. Live demonstrations in Hall 25 stand H25-21 will showcase the ease and efficiency of the technology in securing websites against malicious attacks. “Our participation in GITEX GLOBAL 2024 underscores our commitment to addressing the escalating malicious bot attacks faced by organizations worldwide,” said Bertil Brendeke, Chief Revenue Officer (CRO) of BotGuard OÜ. “At GITEX, we aim to engage with industry leaders and stakeholders, sharing our expertise and practical technologies that can help fortify their defences.”
In 2023, 17% of API attacks involved bad bots exploiting business logic vulnerabilities. For hosting companies, such vulnerabilities can lead to unauthorised access to sensitive customer data or control over hosting resources, further emphasizing the need for reliable security protocols and regular audits of their systems. “BotGuard OÜ’s solutions are designed to address these exact challenges, enabling businesses to safeguard their digital assets. The technology is incredibly easy to use, making it accessible for businesses of all sizes,” the company said.
By participating in GITEX GLOBAL 2024, BotGuard OÜ aims to expand its reach in the Middle East, providing local businesses with the tools they need to combat cyber threats effectively. During the event, live demonstrations in Hall 25 stand H25-21 will showcase how their website protection can be set up within a minute. These demonstrations will highlight the efficiency and effectiveness of BotGuard’s solutions.
-
Cyber Security1 week ago
Global Cybersecurity Efforts Gain Momentum, But More Action Needed
-
Cyber Security1 week ago
Proofpoint Sets New Standard for Human-Centric Security
-
Homeland Security1 week ago
Homeland Security Market is Expected to Surpass $900 Bn By 2032
-
Homeland Security1 week ago
Lockheed Martin Delivers C-130J Super Hercules to Egypt
-
Events1 week ago
GITEX Digi_Health 5.0 Expo-Summit Asia Launches in Thailand
-
Cyber Security2 days ago
UAE and Saudi Arabia Face Unprecedented 70% Rise in Threats: Positive Technologies
-
Cyber Security2 days ago
BotGuard OÜ to Offer Live Demos at GITEX GLOBAL 2024
-
Cyber Security15 hours ago
AmiViz Champions Cybersecurity Innovation at Leading MENA Events