The first day of the GISEC Global 2025 has once again positioned Dubai at the heart of global cybersecurity discussions. Now in its 14th edition, the three-day event, taking place at the Dubai World Trade Centre, has become a key platform for advancing cybersecurity dialogue and innovation. Top global cybersecurity enterprises, government officials, CISOs, and experts from leading corporates in the Middle East, Africa, and Asia, are showcasing cutting-edge solutions, exchanging frontline insights, and forging strategic alliances aimed at strengthening cyber defenses across borders and industries.
UAE’s Strategic Cybersecurity Vision: The UAE is widely regarded as a global leader in cybersecurity, thanks to its forward-thinking policies and national strategies designed to strengthen its digital infrastructure. This vision is underpinned by initiatives like Cyber Sniper, which upskills local talent, and the Dubai Electronic Security Center’s cybersecurity index, which ensures organizations adhere to strict security guidelines.
Ned Baltagi, Managing Director for the Middle East, Turkey, and Africa at SANS Institute, shared his thoughts on the UAE’s proactive approach to cybersecurity. Baltagi said: "The UAE’s forward-thinking cybersecurity policies and national strategies are setting a global example. By aligning with frameworks like SCyWF and investing in programmes that develop homegrown talent, the UAE is building a sustainable cybersecurity ecosystem." He further emphasized that the SANS Cyber Academies are instrumental in developing local talent through industry-aligned training and certifications, helping to bridge skills gaps and enhance regional resilience.
Cybersecurity Innovation: One of the key themes discussed on the first day was the increasing role of AI in both driving cyberattacks and advancing cybersecurity defenses. With AI-powered threats becoming faster, more targeted, and harder to detect, the cybersecurity community is responding by leveraging AI to enhance defensive measures.
Sujoy Banerjee, Associate Director at ManageEngine, highlighted the growing complexity of cyber threats and the need for evolving regulatory frameworks to address them. He stated, "Although AI is intended to ease the burdens of organizations today, it has turned out to be a menace. Becoming an ally for bad actors, AI introduces potential (and scalable) cyber risks into the picture in the form of fake websites, hyper-realistic phishing attempts, and much more."
Banerjee also called for updated policies and guidelines to combat AI-specific threats, such as data poisoning and misuse of AI agents, which could undermine traditional cybersecurity defenses.
Endorsing a similar view, Meriam ElOuazzani, Senior Regional Director for META at SentinelOne, said. "GISEC plays a pivotal role in advancing the region’s cybersecurity landscape by uniting global innovation with regional ambition. It’s where the region shapes its cyber resilience blueprint and asserts its leadership on the global stage."
ElOuazzani spoke about the significance of agentic AI, a technology that autonomously triages alerts, investigates threats, and triggers full-loop remediation workflows. This innovation is changing the paradigm from reactive security to proactive defense, ensuring faster response times and stronger protection.
The Growing Threat of AI-driven Ransomware: AI-driven ransomware has emerged as one of the most pressing concerns. Attackers are leveraging AI to automate phishing, adapt in real-time, and bypass traditional defenses, resulting in more targeted and damaging attacks.
Gopan Sivasankaran, General Manager, Secureworks, a Sophos Company, explained how this evolution is reshaping the cybersecurity landscape. "AI-driven ransomware is fundamentally changing the way cyberattacks unfold—making them faster, more targeted, and harder to detect," he noted.
This rise in AI-powered cybercrime is not only challenging traditional security measures but also reshaping the dynamics of cyber insurance. Sivasankaran continued, "Insurers are looking for organizations to demonstrate proactive detection, rapid response, and end-to-end visibility before offering favorable coverage." As a result, businesses must invest in AI-driven security solutions like Sophos’ XDR and MDR to reduce exposure to such threats and meet rising insurance expectations.
Collaboration in Cyber Defence: GISEC 2025 highlighted the importance of collaboration between the public and private sectors in addressing the region’s most significant cybersecurity challenges. Maher Jadallah, Vice President for Middle East & North Africa at Tenable, discussed how GISEC provides a unique platform for this collaboration: "Every year, GISEC unites the global and regional cybersecurity community, providing a vital platform for exchanging knowledge, forging partnerships, and driving innovation."
Jadallah emphasised the growing importance of a risk-based approach to vulnerability management, particularly in sectors like energy, utilities, and manufacturing, where operational technology (OT) is increasingly converging with IT. "By combining continuous visibility across IT and OT assets with threat intelligence, security teams can focus on the most impactful risks," he added. This unified approach to cybersecurity is essential to ensure resilience across critical infrastructure environments, which are often prime targets for cybercriminals.
Upskilling and Retaining Local Talent: A major theme throughout GISEC 2025 was the need to upskill local cybersecurity talent. As the region faces a growing cybersecurity skills gap, many organizations are now prioritizing internal development over external hiring. Ned Baltagi from SANS Institute noted, "Curiosity, adaptability, and cultural fit often outmatch technical credentials—and these traits already exist internally." Companies are recognizing that these qualities are crucial for building a resilient cybersecurity workforce.
Baltagi's comments resonate with the findings of SANS' latest Workforce Research Report, which shows that 51% of organizations prefer to upskill their existing teams rather than hiring externally. By investing in tailored training programs and certifications, companies are ensuring that their teams are equipped to handle the complex challenges of today’s rapidly evolving cybersecurity landscape.
GISEC 2025’s first day reinforced the UAE’s commitment to becoming a global leader in cybersecurity. As the region continues to face increasingly sophisticated cyber threats, the emphasis on AI-driven solutions, collaboration, and upskilling local talent is more critical than ever.
Industry leaders underscored the need for proactive cybersecurity measures, continuous innovation, and international cooperation to build a secure digital future. With GISEC providing the stage for these vital discussions, the UAE is well-positioned to lead the way in shaping the global cybersecurity landscape.