UAE firms boost cybersecurity budgets by 35% to beat AI-powered ransomware attacks

Companies in the UAE have increased their budget for cybersecurity by as much as 35 per cent as compared to maximum 30 per cent global surge over the past year, following a study that revealed 7 out of 10 firms in the country fell victim to ransomware attacks in the last two years.

The 2023 Data Risk Management report by US-based multi-cloud data management company Veritas Technologies noted UAE organisations are prepared than before to protect against AI-powered cyberattacks, but organisations must continue to strengthen their online infrastructure.

AI not only enhances threat detection but also empowers cybercriminals to execute sophisticated attacks, the recently released report highlighted.

Stay up to date with the latest news. Follow KT on WhatsApp Channels.

Ramzi Itani, regional director at Veritas Technologies, told Khaleej Times: “The evolution of AI (artificial intelligence) is making data privacy compliance more complex. As such, regional and national regulatory bodies must continue to develop legislative guardrails for public-facing large language models (LLMs) and Generative AI (GenAI).”

“Vigilance and adaptability are not merely optional but essential, and are also recognised as critical by individuals,” he underscored.

Itani also noted: “Veritas research on the use of generative AI technologies in professional environments showed that 44 per cent of employees surveyed in the UAE understood that using public generative AI tools did introduce greater risks of sensitive information being leaked.”

The UAE has experienced more successful ransomware attacks than most of the 13 countermarkets, according to the report that revealed 73 per cent of organisations in the UAE have experienced a successful ransomware attack in the past two years, which is a substantially higher than the global percentage of 65 per cent.

Ransomware attacks are not the only type of cyberattacks as slightly more than half (or 52 per cent) of organisations in the UAE have experienced a loss of data over the past two years from sources other than ransomware attacks.

Delete chat history

IT (information technology) experts, meanwhile, constantly remind users to delete chat history after using ChatGPT because any information entered into ChatGPT – if chat history is not disabled – may become a part of its training dataset.”

ChatGPT collects account information, conversation history, as well as records such as email address, device, IP address and location, and any other public or private information that are used in ChatGPT prompts. ChatGPT saving data is not a security risk in itself but using the chatbot without implementing data security strategy is dangerous.

Zero Trust model

“Some key strategies that organisations can implement to safeguard digital identity amidst these challenges can be embracing a Zero Trust model – implementing strict access controls, continuous monitoring, and robust authentication mechanisms such as biometric authentication,” said Mohamed Eissa, regional sales director at Entrust.

He added companies must also implement end-to-end encryption for sensitive data and prioritise cybersecurity training to educate employees and users against phishing attempts, noting that “even the most highly-trained security professionals may miss increasingly realistic AI-generated phishing scams, across text, voice, and video.”

Summary of the UAE report

• UAE foils attempted cyberattacks by terrorist groups