Connect with us

Financial News

Ransomware is Indiscriminatory – Prepare for Everything to Fail

Published

on

Ransomware attacks continue to grow in frequency. As well as being more common, ransomware is also getting more potent. As per Veeam’s 2023 Ransomware Trends Report, 21% of companies paid the ransom but could not recover their data. The threat landscape is as volatile as it has ever been. There are more attacks taking place. They are more diverse. And they can have grave consequences for the companies they affect.

On the other hand, rather than tremble with fear at the awesome power of the cyber-attacks waiting to be deployed against them, organizations must focus on what they can control – their defence. Protecting your business against cyber-attacks requires following some fundamental and consistent principles – no matter what is thrown at you.

The ransomware wild west

There is a lawless and brutal feeling about businesses’ current cyber landscape. It is difficult for governments to hold cyber criminals to account, and companies are often keen to minimize public attention towards an incident that has compromised them. This contributes to a situation where almost all the focus is on the victim (the business) rather than the criminal (the attacker).

Furthermore, ransomware – and most contemporary cybercrime – is almost indiscriminatory for those who suffer. The fact is that every business is a target. Yes, hacktivist organisations such as Anonymous use organised cyber-attacks to exercise social justice and call out businesses or governments they view as immoral, unlawful, or dangerous. But even the most philanthropic and virtuous companies can find themselves begging a cybercriminal gang to restore their data and systems while a hefty ransom is demanded.

You often see a comparison made between cyber-attacks and fishing. Hence, the term ‘phishing’ refers to using an email or text as bait to trick a victim into ‘biting’ – in this case, clicking on the link and unwittingly downloading malware onto their device. With ransomware especially, we are now seeing industrial-scale attacks being carried out, which are more analogous to trawler fishing. This isn’t one guy with a rod casting out to get a bite off one or two fish. It’s AI-infused algorithms programmed to target everyone and everything – playing a blind numbers game to catch whatever it can.

This indiscriminate nature is compounded by cyber-attacks being generally difficult to contain. For example, cyber warfare between nation-states threatens every organisation – not just those deemed to be in the firing line. We saw this with the NotPetya attack in 2017 – an attack on a specific utility company – which impacted multiple unrelated organisations through an entirely organic chaos spread. Attack types also continue to evolve. For example, the LokiLocker attack was one of the first reported ransomware strains to include a disk wiper functionality. This means organisations are not only held to ransom by having services suspended and threats of data extortion. Now, they are being threatened with losing vast swathes of data entirely if they do not pay up.

Consistent principles of defence

There is some good news for businesses. No matter how scalable, spreadable, or malicious an attack is, these various evolutions can be viewed as attackers simply using bigger guns and more of them. The fundamental principles of preparing your defences against even the most sophisticated and powerful ransomware stay relatively the same.

First, practice impeccable digital hygiene. All employees must be trained to identify suspicious content and be warned of the impact that malpractice using work devices can have. For all the might at the hands of cybercriminals, in many ways, their biggest weapons are unsuspecting employees who give them the keys to the back door of an enterprise network. Given the scattergun approach now adopted by many cyber-attacks, criminals are not necessarily targeting your organisation specifically. But you’ll become a victim if you prove to be an easy hit.

With that said, all businesses must prepare for their defences to fail – no matter how robust you might think they are. Concepts such as zero trust and deploying techniques such as two-factor authentication can be useful for restricting an attacker’s access to data by taking over one individual’s workstation. Ultimately, the best way to protect data is to ensure that it has been securely backed up and fully recoverable before an incident occurs. Follow the 3-2-1-1-0 backup rule, which states there should always be at least three copies of data on at least two different types of media, at least one off-site and one immutable or offline, with zero unverified backups or errors.

While the headlines and constant discussion around cybersecurity and ransomware can be daunting, it’s important to remember that the fundamental actions required to protect data remain the same. Data Protection and Ransomware Recovery strategies ensure businesses can protect all data from cyber-attacks, server outages, accidental loss, and deletion across physical, virtual, cloud, SaaS, and Kubernetes environments. Investing in a data protection strategy and taking advantage of a solution that enables continuous backup and Disaster Recovery (DR) can give businesses peace of mind that should the worst happen, they never need to pay the ransom.

Continue Reading

Financial

Standard Chartered appoints Michelle Swanepoel as Head of Financing and Securities Services Middle East and Africa

Published

on

Standard Chartered today announced the appointment of Michelle Swanepoel as Head of Financing and Securities Services (FSS), Middle East and Africa. Based in Dubai, she will lead the business across the region  effective 1 July 2026. Michelle succeeds Scott Dickinson, who will be retiring from the bank on 30 June after more than 40 years in financial services.

Michelle Swanepoel joined Standard Chartered in September 2017 as the Regional Head of Business Account Management for the Middle East and Africa and was appointed the Regional Head of Securities Services for Africa in May 2019. In September 2024, her role expanded to include Head of Markets for South Africa.

“Michelle has played a strong leadership role in the evolution of post‑trade servicing across Sub‑Saharan Africa, supporting capital market development, regulatory reform, enhanced investor access and market infrastructure, and is a recognised industry subject‑matter expert,” said Margaret Harwood-Jones, Global Head of FSS. “I have every confidence that Michelle will drive further momentum in the region, building on the solid foundation established by Scott.”

Scott Dickinson joined Standard Chartered in 2017 and he has led the Bank’s FSS franchise in MEA since 2019. During his tenure, he oversaw strong growth across the Middle East and Africa franchise, supported expansion into markets including Saudi Arabia and Egypt, and helped deliver the Bank’s first Digital Asset Custody capability in the Dubai International Financial Centre.

Continue Reading

Financial

STAKE PARTNERS WITH ACE & COMPANY TO DEVELOP SECONDARY TRANSFER FACILITY FOR FRACTIONAL REAL ESTATE INVESTMENTS IN THE UAE

Published

on

Dubai skyline with Burj Khalifa centered, featuring Stake x ACE & Company partnership branding over city skyscrapers and highways.

Stake, the MENA region’s leading digital real estate investment platform, and ACE & Company, a Swiss-headquartered global investment group focused on private markets, with more than $2.0 billion in assets under management, today announced a strategic partnership to support the development of liquidity solutions for investors in Stake products. The agreement will focus initially on the platform’s real estate portfolio in the UAE, held through Prescribed Companies, the equivalent of Special Purpose Vehicles (SPVs) in DIFC.

The initiative is intended to create a more liquid, transparent, and efficient marketplace for investors seeking exposure to fractional real estate opportunities through Stake’s platform. By combining Stake’s innovative access model with ACE & Company’s longstanding experience in private market investing and secondary transactions, the partnership aims to strengthen the investment ecosystem around fractional ownership structures in the UAE.

The joint venture reflects both firms’ confidence in the long-term fundamentals of the UAE. At a time of heightened regional uncertainty, the UAE continues to distinguish itself through economic resilience, political stability, high-quality infrastructure, and sustained global investor interest. These attributes have helped position the country as one of the region’s most compelling destinations for long-term real estate capital.

Through the planned secondary infrastructure framework, investors in Stake products are expected to benefit from greater flexibility in managing their holdings, improved visibility around market pricing, and clearer pathways to liquidity. In turn, the broader market stands to benefit from enhanced stability, stronger price discovery, and increased participation and confidence in fractional real estate as an investable asset class. The framework operates within Stake’s existing DFSA-approved regulatory permissions, providing investors with established oversight and regulatory clarity. Stake is regulated by the DFSA, the independent regulator for business conducted from or within DIFC.

For Stake, the partnership marks an important step in the continued evolution of its platform, extending beyond access to ownership and toward the development of more mature market infrastructure. For ACE & Company, the collaboration draws on its extensive experience in private equity and secondaries to help unlock liquidity solutions in a fast-growing segment of the alternative investment landscape. The DIFC’s established private markets framework, and its Prescribed Company regulations in particular, have been central to enabling this model, providing the institutional and legal infrastructure on which this secondary transfer facility innovation is built.

Manar Mahmassani, Co-Founder and Co-CEO of Stake said:

“The UAE has always rewarded those who invest in it with conviction, and that’s exactly what this partnership represents. Stake was born in crisis. We launched during COVID, when global real estate markets were struggling and Dubai’s property industry was at its low point. What we saw was a market that is far from broken, but fundamentally sound, going through a temporary challenge. That conviction has never left us. Today, the world is watching the region, and we want to be unambiguous about where we stand: we are long Dubai, and we are long the UAE. This is not the moment to retreat: it’s the moment to build the institutional infrastructure this market deserves. That’s exactly what this partnership is all about – a mature, resilient market attracting institutional confidence and capital committed for the long run.”

Sherif El Halwagy, Partner and Co-Founder at ACE & Company said:

“Drawing on almost two decades of experience in offering liquidity to investors across private markets ecosystems via secondaries, we see a tremendous opportunity in real estate secondaries in the UAE. This partnership reflects our conviction in the country’s long-term fundamentals and our disciplined approach to capital deployment in high-quality assets. We look forward to further strengthening our relationships with investors and partners across the region.”

The partnership is designed to benefit all stakeholders across the ecosystem. Existing investors gain added optionality and transparency, prospective investors gain greater confidence in the structure, and the market benefits from stronger liquidity mechanisms, a scalable source of permanent/long-term capital and a more institutionalized framework for participation.

As fractional ownership continues to gain traction globally, Stake and ACE & Company believe that robust secondary infrastructure will play a critical role in supporting the sector’s long-term growth. The joint venture represents a shared commitment not only to product innovation, but also to building the underlying market architecture needed to support sustainable expansion in the UAE and beyond.

Continue Reading

Financial

UAE’S R&D TAX CREDITS COULD UNLOCK SIGNIFICANT VALUE FOR CONSTRUCTION SECTOR

Published

on

Construction companies across the UAE may be overlooking one of the most valuable outcomes of the country’s new R&D Tax Credit regime. Introduced under Ministerial Decision No. 24 of 2026 and effective from 1 January 2026, the framework offers credits of 15% to 50% on qualifying R&D expenditure. Yet, according to Dhruva, a Ryan Affiliate, many construction businesses have yet to identify the full extent of qualifying activity or put in place the processes required to claim these benefits.

As one of the UAE’s most economically significant sectors, construction is uniquely positioned to benefit from the regime. Innovation in this sector is continuous, spanning materials, construction methods, digital tools and safety systems but much of it has historically not been classified or documented as R&D.

“The construction sector innovates constantly, in materials, in methods, in software, in safety. The challenge is that much of this activity has never been labelled R&D, and therefore never documented as such. That is precisely where value is being left on the table. Companies that begin mapping their qualifying activities now, and build the evidence trail the regime demands, will be the ones positioned to capture this benefit when it matters most,” said Nimish Goel, Leader Middle East, Dhruva, Ryan LLC Affiliate.

To qualify under the regime, R&D activities must meet five criteria aligned with the OECD Frascati Manual: they must be novel, creative, uncertain in outcome, systematic, and transferable or reproducible. For construction businesses that approach innovation with defined objectives, structured experimentation and documented results, a wide range of activity meets this threshold.

In practice, qualifying activity in the construction sector can include the development of advanced materials such as low-carbon concrete and smart composites, experimentation with modular construction techniques and prefabrication systems, and proprietary software development for Building Information Modelling (BIM), digital twins and AI-driven project management. Sustainability innovation also qualifies, including net-zero building systems and passive cooling technologies suited to UAE conditions, as does the adoption of robotics and drone-based construction and inspection methods.

The critical distinction lies between routine construction activity and genuine R&D. Applying an established methodology to a new project does not qualify. Systematically resolving technical uncertainty through experimentation and documenting that process does.

A distinguishing feature of the UAE regime is its dual-threshold structure. Each credit tier requires businesses to meet both a minimum level of qualifying expenditure and a minimum average R&D headcount. The first AED 1 million of qualifying spend attracts a 15% credit with at least two R&D staff; spend between AED 1 million and AED 2 million qualifies for 35% with at least six staff; and spend between AED 2 million and AED 5 million attracts 50% with at least fourteen. Where headcount thresholds are not met, the applicable credit rate is reduced accordingly.

For construction companies, this makes workforce planning integral to tax strategy. Specialist roles including materials scientists, structural engineers working on novel challenges, proptech developers and robotics engineers not only drive innovation but also determine access to higher credit tiers. Staff costs additionally benefit from a 30% uplift in qualifying expenditure, further strengthening the case for building dedicated R&D capability.

“This is not just a tax incentive; it represents a structural shift in how innovation is recognised within the construction sector. Businesses that act early will not only benefit financially but also strengthen their long-term technical capabilities,” added Nimish.

The regime places significant emphasis on contemporaneous documentation and structured processes. Pre-approval from the relevant authority is mandatory, and businesses must maintain detailed technical records of R&D objectives, methodologies, experiments and outcomes for a period of seven years. For construction companies, this requires embedding R&D tracking into project workflows from the outset, rather than attempting to reconstruct evidence retrospectively.

Construction groups operating centralised engineering or shared technology platforms should also review their structures carefully. Intra-group transactions are excluded from qualifying expenditure, making it critical to ensure that R&D costs are appropriately allocated at the entity level.

“The UAE’s construction sector is building the physical infrastructure of a knowledge economy. It is fitting that those who innovate within it now have access to the same calibre of R&D incentive as their counterparts in technology or manufacturing. The question is not whether to engage, but how quickly companies can build the processes to do so effectively,” concluded Nimish.

Continue Reading

Trending

Copyright © 2023 | The Integrator