Black Hat MEA 2024, the world’s fastest-growing cybersecurity event, will open its doors from November 26 to 28 at the Riyadh Exhibition and Convention Centre in Malham. Now in its fourth year and welcoming over 40,000 guests, BlackHat MEA 2024 will witness a 135% increase in startups at the event from 2023, as well as a 52% increase in new brands taking part in the 2024 edition.
The annual summit, organised by Tahaluf in partnership with the Saudi Federation for Cybersecurity, Programming, and Drones – will bring the brightest minds in cybersecurity from across the globe for three days of presentations, panel discourses, and networking opportunities. More than 450 exhibitors will attend the show.
Ned Baltagi, Managing Director, Middle East, Africa, and Türkiye, SANS Institute
At Black Hat MEA 2024, SANS is showcasing its expertise in bridging the global skills gap, focusing on practical, hands-on training. SANS will be hosting a series of NetWars tournaments at the booth, and this interactive competition will give visitors first-hand experience with how its hands-on training programmes prepare cybersecurity professionals to tackle real-world challenges immediately.
The NetWars tournament is just a preview of the depth of training SANS brings to the region to help secure its future. A number of new threats will be on the rise in 2025, and key cybersecurity trends include the escalating role of AI in both offensive and defensive cyber tactics, the convergence of IT and OT security, and the critical need for supply chain security. As attack surfaces expand, the importance of continuous skill development and threat intelligence sharing will only grow, making platforms like Black Hat MEA vital for shaping the industry’s future.
SANS Institute is committed to empowering Saudi Arabia’s cybersecurity community through tailored training, certifications, and partnerships. By integrating advanced AI into its curriculum, SANS enable cybersecurity professionals to harness its power for proactive threat detection, automated incident response, and predictive analytics.
AI-driven tools not only streamline security processes but also equip practitioners to address emerging threats with precision. Through initiatives like the SANS Cyber Safari programme, SANS’ largest training event in the Saudi Arabia, and collaborations with local organisations, the company is building a workforce ready to protect the Saudi Arabia’s critical infrastructure.
Ezzeldin Hussein, Regional Senior Director, Solution Engineering, META, SentinelOne
SentinelOne will showcase its vision for autonomous cybersecurity at Black Hat MEA 2024, emphasizing the importance of integrating AI to counter sophisticated threats. SentinelOne’s demonstrations will highlight the role of extended detection and response, XDR, ITDR, Identity Threat Detection and Response, and advanced threat-hunting capabilities to proactively safeguard digital ecosystems.
Looking ahead to 2025, several trends are poised to dominate the cybersecurity landscape. These include the convergence of IT and OT security, heightened focus on identity-based attacks, and increased adoption of zero-trust architectures. With AI at the core, the focus will shift toward predictive threat intelligence, enabling organisations to anticipate and neutralise risks before they manifest.
SentinelOne remains committed to fostering innovation and resilience, ensuring Saudi Arabia is equipped to lead in the global cybersecurity arena.
As a leader in autonomous cybersecurity solutions, SentinelOne is proud to contribute to Saudi Arabia’s Vision 2030 goals by empowering organisations with cutting-edge AI-driven technologies. SentinelOne’s Singularity Platform uses advanced machine learning and behavioural AI to deliver real-time threat detection, response, and recovery. This ensures organisations can stay resilient against evolving cyber threats while maintaining operational continuity.
Maher Jadallah, Vice President, Middle East and North Africa, Tenable
At Black Hat MEA Tenable will showcase its AI-powered Cloud Security solution that supports securing Saudi Arabia’s Cloud-First, Digital Vision 2030. This cloud-native application protection platform helps reduce risk by rapidly exposing and closing priority security gaps caused by misconfigurations, risky entitlements and vulnerabilities–across multi-cloud platforms such as GCP, AWS, Azure and OCI.
In addition the team will be demonstrating Tenable Enclave Security, a unified cyber risk solution, which delivers innovative cybersecurity capabilities to highly secure environments while addressing strict data residency and security requirements. As well as offering demonstrations of Tenable One.
Market reports indicate that companies in Saudi and globally in general have started investing more in Artificial Intelligence solutions to enhance their capabilities in detecting and analysing attacks.
Through 2024 we have seen growing interest in the region, and across the world, in AI technology being used to enhance cybersecurity, due to the increase in cyber threats.
Tenable has developed the industry’s only AI-powered Exposure Management Platform. Tenable One gives security teams unified security visibility, actionable insights, and enhanced control over the organisation’s entire attack surface.
Anton Shipulin, Industrial Cybersecurity Evangelist, Nozomi Networks
At Black Hat MEA, Nozomi Networks will showcase its role in helping organisations across the Middle East meet regional compliance standards, including NCA requirements and the OT Cybersecurity Controls framework. The Nozomi Networks platform, equipped with advanced monitoring, reporting, and risk management tools, enables organisations to stay compliant with these regulations, ensuring that critical infrastructure is both secure and aligned with mandated protocols.
Senior experts will also be available to have insightful discussions on cybersecurity trends that professionals need to be aware of for 2025.
With an expanded portfolio of regionally focused solutions, Nozomi Networks is supporting Middle Eastern organisations, including those in the Saudi Arabia, as they navigate the complexities of securing critical infrastructure at a time when AI is significantly reshaping cybersecurity. Nozomi Networks’ efforts, exemplified through its advancements in anomaly detection, powered by predictive analytics, provide early warnings and minimise risks to critical assets, aligning with Vision 2030, and contributing to the growth of the Saudi Arabia’s cybersecurity sector by addressing the growing convergence of IT and OT security.
For instance, non-traditional markets like entertainment and sports facilities are recognising the need for cybersecurity protection. There is a perception that these sectors are not vulnerable to cyberattacks, However, this is beginning to change.
Building management systems and other connected devices are often overlooked but can serve as entry points for attacks. These sectors now are realising the critical nature of their cyber-physical systems and the need for visibility and security.
Unmanned aerial vehicles, drones are also seeing increased application in both military and civilian, industrial use, therefore becoming potential targets for attacks, as many processes depend on them. Cybersecurity of space infrastructure, including satellites and ground components, is becoming a critical issue as well. Many industries rely on space-based communication and services, making them vulnerable to attacks targeting the space domain.
Post-quantum cryptography is an important emerging trend that organisations, especially in the industrial, OT space, should start preparing for, even though the full impact may not be felt for several years.
Harish Chib, VP Emerging Markets, Middle East and Africa, Sophos
At Black Hat MEA, Sophos will showcase its latest advancements in cybersecurity, particularly focusing on how its solutions can support organisations in Saudi Arabia in their journey towards Vision 2030. One key area of emphasis was the Sophos Firewall, which offers network security with advanced threat protection, web filtering and secure VPN access, ensuring that businesses can protect their networks from even the most sophisticated attacks.
The company will also highlight Sophos Managed Detection and response, MDR, a comprehensive threat detection service that combines machine learning and expert human analysis. With MDR, the security team actively monitors, detects and respond to threats 24×7, allowing organisations to focus on their core business while maintaining a strong cybersecurity posture. By integrating Sophos Firewall and MDR, Sophos provides end to end security coverage that aligns with the Saudi Arabia’s strategic goals for a resilient and secure digital infrastructure.
As part of our engagement with the cybersecurity community, Sophos is participating in Black Hat 2024 in Saudi Arabia. This event provides us with a platform to showcase our latest AI-powered cybersecurity solutions and engage with key stakeholders to address the Saudi Arabia’s cybersecurity challenges.
By combining AI innovation with strategic collaboration and active participation in events like Black Hat MEA 2024, Sophos is proud to play a significant role in securing Saudi Arabia’s digital transformation journey.
At Sophos, we are committed to enhancing Saudi Arabia’s cybersecurity landscape through innovative solutions powered by advanced AI technologies. Our efforts are closely aligned with the Saudi Arabia’s Vision 2030, which prioritizes digital transformation and cybersecurity resilience.
Sophos leverages Artificial Intelligence to provide real-time detection, prevention, and automated response to cyber threats. Our AI-driven solutions, such as Sophos Intercept X, utilise deep learning to stop sophisticated attacks like ransomware and zero-day exploits before they cause harm.
We work hand-in-hand with local partners and organisations to develop and implement strategies tailored to Saudi Arabia’s specific needs. Our regional presence ensures that businesses and government institutions receive the expertise and support required to stay ahead of emerging threats.
Through training initiatives and workshops, we are building local capacity by equipping cybersecurity professionals with the knowledge and tools to utilise AI-driven technologies effectively.
Tom Lowndes, Regional Director, Middle East, CyberArk
We want to double the size of our business in Saudi Arabia in the next 12-24 months. Black Hat offers a great platform to show the people of Saudi Arabia that we are here with our full range of solutions. It is also an excellent opportunity to build relationships with people, meet existing customers, connect with new ones, and build out and strengthen our partnerships and channel relationships.
We will be showcasing our major solutions, with a particular emphasis on Cora AI, Secrets Management, and machine identity solutions from Venafi, which CyberArk acquired earlier in the year. Combined, our solutions are vital to help companies cope with a fast-changing threat landscape, with the rise in the number of human and machine identities having transformed the threat landscape in Saudi Arabia and globally in 2024.
Saudi Arabia is a very important market for CyberArk in the Middle East. We have been experiencing growth of about 25% year-on-year in Saudi since we launched our services in the region over six years ago.
Saudi Arabia is accelerating rapidly as part of that growth and now makes up about 40% of CyberArk’s Middle East business. We have more than 50 customers in Saudi Arabia including some of the biggest names in finance, government, and manufacturing. Our customer base continues to grow, with an average of five new customers joining every quarter.
We are making significant investments in Saudi Arabia, and we want to enable our full platform and establish a local presence in the country within the next 18 months. This will enable end-to-end holistic identity services and allow us to focus on helping customers reduce the number of tools they use and lower their cyber debt. This is important as the average Middle East customer uses 10 tools to manage identity security, which causes unnecessary complexity and weakness.
Ilyas Mohammed, Chief Operating Officer, AmiViz
AmiViz announced its participation in Black Hat MEA 2024, one of the region’s foremost cybersecurity events. The exhibition, taking place in Riyadh, will see AmiViz joining forces with a distinguished lineup of vendor partners to present an array of advanced security solutions aimed at protecting enterprises from evolving cyber threats.
The collaboration showcases the following industry leaders BlackBerry, ZinadIT, AlgoSec, Check Point, Sysdig, Darktrace, EfficientIP, Fidelis Security, Intercede, Bitsight.
We are thrilled to participate in Black Hat MEA 2024 alongside our esteemed vendor partners. Our collaboration showcases a broad spectrum of cutting-edge cybersecurity solutions that address today’s dynamic threat landscape. As the demand for advanced security solutions continues to grow in Saudi Arabia, we remain dedicated to empowering our customers with innovative technologies that drive digital resilience and support their cybersecurity strategies.
The collaboration underscores AmiViz’s dedication to equipping organisations with top-tier solutions that safeguard critical digital assets and support strategic digital transformation initiatives. With cyber threats intensifying, the company remains committed to delivering the latest in cybersecurity innovations, enabling enterprises to maintain robust, resilient digital environments.
A recent report from Research and Markets highlights the rapid growth in the Saudi Arabian cybersecurity sector. Valued at USD 4.85 billion in 2023, the market is expected to grow at a compound annual growth rate, CAGR of 18.33% through 2029. This substantial growth is fuelled by the nation’s digitisation efforts, increasing cloud adoption, and rising demand for enhanced security frameworks.
As a central player in this landscape, AmiViz aims to leverage its partnerships and technical expertise to support the evolving needs of Saudi enterprises, reinforcing its position as a premier distributor in the cybersecurity space.
Salman Faqeeh, Managing Director, Cisco Saudi Arabia
Cisco is participating as a Strategic Sponsor at Black Hat MEA 2024 under the theme Innovating a New Era of Security, showcasing its latest innovations in cybersecurity. This year, Cisco is highlighting how it powers and protects the engine of the AI revolution – AI-ready data centres and clouds – to make every application and device secure no matter how they are distributed or connected.
The mounting trends in identity-based attacks and ransomware highlight the evolving nature of cyber threats. At Cisco, we are committed to supporting our customers in strengthening their digital resilience with advanced security solutions. Black Hat MEA continues to be a significant platform for us to share latest threat insights and showcase our innovations that prevent identity-based attacks; detect and stop breaches; and close the exploit gap.
Splunk, a Cisco company, will showcase its innovations at the same booth, demonstrating solutions that support the future of Security Operations Centres, SOC as well as specialised solutions for Operational Technology, OT environments.
As part of Cisco’s programme of events at Black Hat MEA, Lothar Renner, Managing Director, Cisco Security, EMEA, will deliver a keynote address on Redefining Security in the Age of AI, emphasizing Cisco’s commitment to innovation and security in an increasingly complex threat environment.
Ahead of Black Hat MEA in Riyadh, Cisco released insights into key cybersecurity trends that emerged between July and September 2024. The findings are based on analysis from Cisco Talos, one of the most trusted threat intelligence research teams globally, highlighting a notable increase in identity-based and ransomware attacks.
Over the three-month period, there was a noticeable rise in identity-based attacks, particularly with a focus on stealing credentials, which accounted for 25% of incident response engagements. These types of attacks have become easier to execute, often using readily available tools.
Ransomware incidents also remained a significant concern, making up nearly 40% of engagements. New ransomware variants, including RansomHub, RCRU64, and DragonForce, were observed this quarter, alongside familiar variants like BlackByte and Cerber.
Organisations in the education, manufacturing, and financial services verticals were most affected this quarter, accounting for over 30% of compromises. This trend aligns with what was observed in previous quarters in 2024.