SECURITY NEWS
74 % Saudi respondents experienced phishing attacks in 2024 finds Sophos
Sophos , a global provider of security solutions for defeating cyberattacks , released findings from its Saudi Arabia Cybersecurity Awareness Survey 2024 . According to the report , 74 % of respondents experienced phishing attacks , indicating the need for enhanced email security and employee training .
In addition , the survey states ransomware , 49 % is the second most common cybersecurity concern , with 42 % of organisations lacking formal response plans , highlighting the need for stronger preparedness to effectively mitigate and respond to ransomware incidents .
Phishing has become a significant threat in Saudi Arabia , with a surge in
Cybercriminals operate without regard for international borders , and our defences must adapt accordingly .
malware delivery through malicious email attachments and advanced spear phishing attacks . The advent of AI-powered phishing campaigns has further escalated the risk , making traditional defences like employee training insufficient .
Businesses must adopt proactive solutions like Sophos MDR , which combines advanced email filtering , real-time detection and incident response to counter modern phishing threats and strengthen security posture .
“ Today ’ s threat landscape is continually evolving , growing more severe and complex , particularly in regions like Saudi Arabia , where digital transformation is rapidly advancing , there is an urgent need to heighten cybersecurity awareness and preparedness ,” said Chester Wisniewski , Global Field CTO at Sophos .
Chester Wisniewski , Global Field CTO , Sophos
“ Cybercriminals operate without regard for international borders , and our defences must adapt accordingly . While ransomware attack rates have declined over the past two years , the impact on victims has increased . To combat these persistent threats , organisations in the Saudi Arabia and beyond must adopt a proactive , human-led approach to threat detection and response , leveraging advanced technology and continuous monitoring to stay ahead of attackers .”
According to the survey , 59 % of the respondents also utilise Artificial Intelligence tools for cybersecurity . AI has revolutionised the way IT security professionals think about cybersecurity . Advanced AI-powered tools and systems enhance data protection by rapidly identifying behavioural patterns , automating processes , and detecting anomalies providing stronger defences against emerging threats .
Employee training and awareness rank as the most effective AI application across various organisations , followed by threat detection and risk analysis as the second and third most impactful measures supporting cybersecurity efforts . AI still requires human intervention for training and correcting mistakes .
A growing concern is the potential for hackers to exploit AI for malicious purposes , such as generating phishing emails and developing malware . In larger organisations with more than 500 employees , 55 % of employees are “ very concerned ” about AI-powered attacks , compared to 33 % in medium-sized and 11 % in smaller organisations .
The rapid pace of innovation in the cybersecurity landscape makes it challenging for organisations to be prepared for evolving threats and implement cyber controls designed to counter them . Larger organisations , 76 % of the respondents with in-house expertise , are better equipped to manage risks , while smaller ones , 21 % often lack the resources , making them more vulnerable to attacks .
Thirty-five percent of the respondents stated that the most cited skill gaps are in AI , Machine Learning in cybersecurity followed by cloud security , 25 %. Across all organisations , quarterly training remains uncommon , with only 12 % in medium organisations and 19 % in large organisations adopting this frequency . •
INTELLIGENT TECH CHANNELS 13