Business Leaders Must Shift from Managing Devices to Managing Identities Amid Rising Cyber Threats, Says Abdullah Altaifi of Palo Alto Networks

The COVID-19 pandemic has reshaped the landscape of work and cybersecurity, forcing organizations to adapt to remote and hybrid models almost overnight. As businesses navigate ongoing disruptions, Abdullah Altaifi, Regional Vice President for Saudi Arabia, Lebanon, and Bahrain at Palo Alto Networks, emphasizes the critical need for leaders to shift their focus from managing devices to managing identities. This shift is not merely a matter of convenience; it is essential for safeguarding against an evolving wave of cyber threats.

The Impact of COVID-19 on Work Models

The pandemic accelerated a trend toward remote work that was already underway. Organizations had to quickly implement home and hybrid working models, often without the necessary cybersecurity measures in place. Altaifi notes that the lessons learned during this period are invaluable for current and future challenges.

As many organizations in the Gulf region revert to remote and hybrid work, ensuring robust cybersecurity measures is paramount. The need for a comprehensive security posture that protects users across all devices and locations has become increasingly clear.

Cyber Threats in a Changing Landscape

Reports indicate a resurgence of cybercriminal activity, particularly in the form of scams targeting vulnerable individuals. Fake airline support accounts have emerged, preying on tourists stranded in the Gulf region, while attempts to access bank accounts have also been reported. These incidents highlight the opportunistic nature of cybercriminals, who exploit crises for their gain.

Palo Alto Networks advocates for a Zero Trust Network Access (ZTNA 2.0) model, which ensures security follows the user rather than being tied to a specific location. This model allows for continuous inspection of all traffic, thereby enhancing security for remote workers.

Best Practices for Cybersecurity

To protect users working remotely, organizations must implement several best practices. Identity and Access Management (IAM) systems with phishing-resistant multi-factor authentication are essential. Additionally, securing employees’ home workspaces through Secure Access Service Edge (SASE) solutions is crucial for maintaining security integrity.

Altaifi stresses that business leaders must unify security into a single platform. This approach eliminates visibility gaps that can occur during rapid shifts in work models, ensuring that productivity does not compromise compliance or digital integrity.

The Evolving Nature of Cyberattacks

As the cybersecurity landscape evolves, certain attack methods are becoming more prevalent. Cybercriminals are increasingly employing AI-powered phishing attacks, which allow for hyper-personalized content and social engineering at scale. This trend is particularly concerning, as it represents a significant shift in the tactics used by malicious actors.

In Saudi Arabia, a staggering 68% of organizations reported experiencing at least two successful identity-centric breaches, according to the 2025 Identity Security Landscape report from CyberArk, a Palo Alto Networks company. This statistic underscores the urgency for organizations to bolster their identity security measures.

Ransomware attacks are also on the rise, with perpetrators encrypting data or threatening to leak sensitive information. The emergence of deepfake technology for brand impersonation poses additional risks, particularly for high-level executives who may be targeted for fraudulent transactions. The speed of these attacks is alarming, often occurring within hours rather than days.

The Role of AI in Cybersecurity Threats

AI is fundamentally altering the economics of cybersecurity. It enables cybercriminals to automate attacks and exploit vulnerabilities with remarkable efficiency. As a result, traditional manual processes for combating these threats are becoming increasingly inadequate.

To maintain business continuity, organizations must adopt a holistic “platformization” approach to cybersecurity. This involves integrating AI-driven security across networks, clouds, and endpoints into a unified platform. By increasing visibility of network traffic and reducing complexity, organizations can ensure that their security solutions work seamlessly together, closing gaps in their security posture.

Transforming Security Operations Centers (SOCs) with AI and automation is another critical step. This transformation can drastically reduce response times, allowing organizations to react more swiftly to emerging threats. Improving identity security capabilities, including the use of Privileged Access Management (PAM), is essential for preventing breaches by securing high-risk credentials that attackers often target.

By enforcing least privilege across both human and machine identities, organizations can limit lateral movement within their networks. This approach, coupled with auditing all privileged sessions, helps eliminate unmanaged administrative accounts and prevents attackers from exploiting privileges to compromise systems.

As organizations in the Middle East face an increasingly complex cybersecurity landscape, the insights from Abdullah Altaifi serve as a crucial reminder of the need for proactive measures. The shift from managing devices to managing identities is not just a strategic imperative; it is essential for safeguarding against the rising tide of cyber threats.

According to publicly available www.tahawultech.com.

For the latest cybersecurity developments, threat intelligence and breaking updates from across the Middle East: Middle East