The Middle East's cyber front line seeks to counter dangers from artificial intelligence.

Over the past decade, technological advancements have surged forward at an astonishing pace. This rapid progress has brought about significant changes in various aspects of our lives, from everyday activities like shopping and banking to more complex sectors like energy production and shipping. This digital transformation has not only saved valuable time and labour but has also greatly improved accessibility for people around the world. Nevertheless, these remarkable technological strides have ushered in a new era of challenges, primarily centred around the vulnerability of outdated centralized cybersecurity measures. This vulnerability has led to a surge in cyberattacks and online criminal activities, posing a substantial threat to individuals and organizations alike.

As our global economy becomes increasingly intertwined with the digital realm, the need to address international cybersecurity threats becomes all the more pressing. Projections suggest that by 2025, the world will be burdened with an annual cost of a staggering $10.5 trillion to combat these threats effectively.

The Middle East, despite its unique geopolitical landscape, is no exception to this global concern. The region may be particularly susceptible to cyberattacks targeting critical infrastructure. Vital facilities such as oil and gas fields, power plants, ports, and airports are essential components of the Middle East's pivotal role in global energy production. A comprehensive analysis conducted in 2022 by cybersecurity firm Kaspersky highlighted the Middle East as one of the top five regions worldwide in terms of the highest percentage of malware blocked in industrial control systems during that year. To further illustrate the severity of the situation, data from IBM in the years prior revealed that the average cost of a cyberattack on organizations in the United Arab Emirates and Saudi Arabia amounted to $6.53 million, a startling 69 per cent higher than the global average.

The situation took a concerning turn in the second quarter of 2022, with Saudi Arabia experiencing an alarming 168 per cent increase in the frequency of phishing attacks, hacking incidents, and online scams compared to the previous quarter. This surge serves as a stark reminder of the urgent need for robust cybersecurity measures in the Middle East and worldwide as we navigate the increasingly digital landscape.

“There has indeed been a surge in the frequency of cyberattacks targeting Saudi Arabia, but it is vital to stress that this is part of a broader global uptick in illicit activity in the digital space,” said Ashraf Koheil, the Middle East, Africa and Turkiye regional director at cybersecurity firm Group-IB. “Companies and organizations across all verticals and regions are having to respond to increased numbers of phishing attacks, ransomware attempts and scams.”

“The Kingdom of Saudi Arabia is a global economic powerhouse that is undergoing an incredibly rapid digital transformation that has created a wealth of jobs and opportunities,” he said. “In this context, one would expect to see cybercriminals try to take advantage of this in their attempts to trick unwitting members of the public into interacting with phishing pages or scam websites in their attempts to achieve illicit financial gain.”

The surge in e-commerce usage among the Saudi Arabian public in recent years is one driving force behind several noteworthy developments. Safwan Akram, the Managed Security Services Director for Saudi Arabia at cybersecurity provider Help AG, has highlighted the significant shift towards online shopping among consumers. According to data from e-commerce, e-commerce revenues are poised to exhibit a robust compound annual growth rate of 13.5 per cent from 2023 to 2027. This trend is further accentuated by the remarkable decrease in the cost and complexity associated with conducting phishing attacks. This decline can be attributed to the advent of generative artificial intelligence models, a technological advancement that has rendered Arabic-speaking countries, including Saudi Arabia, particularly vulnerable to such cyber threats.

Saudi Arabia has also witnessed the flourishing of a dynamic fintech sector, with numerous new companies emerging under the regulatory framework of the Saudi Central Bank. This burgeoning industry underscores the country's increasing emphasis on digital financial services. Moreover, the cybersecurity market in the Middle East and Africa is on an upward trajectory, with a projected value of $36.2 billion by 2028. This growth is expected to maintain a steady compound annual growth rate of 10.2 per cent over the next five years, as outlined in a recent report by MarketsandMarkets.

“Saudi Arabia has been leading its digitization journey by prioritizing cybersecurity,” said Mohamed Hashem, general manager for Saudi Arabia and Bahrain at Kaspersky.

These developments are mirrored in Saudi Arabia's proactive stance toward cybersecurity. The country has established entities like the Global Cybersecurity Forum Institute and the Saudi National Cybersecurity Authority. These organizations are entrusted with the crucial tasks of formulating, executing, and overseeing comprehensive security strategies.

Since their inception, these institutions have rolled out numerous cybersecurity initiatives, including the Saudi Federation for Cybersecurity and the National Academy of Cybersecurity. These endeavours have yielded impressive results, with Saudi Arabia achieving the second position in the Global Cybersecurity Index within the World Competitiveness Yearbook. This ranking, compiled by the Swiss-based International Institute for Management Development (IMD), underscores the nation's commitment to bolstering its cybersecurity landscape.