Financial

LATEST CYBERSECURITY CHALLENGES IN THE WORLD OF BFSI

Published

6 months ago

April 30, 2026

Integrator Web-Admin

Exclusive interview with Premchand Kurup, CEO, Paramount

Which emerging cyber risks are most likely to influence or reshape GCC banking regulations in the coming years?

We live in an era where nearly every banking service depends on advanced digital infrastructure, and cybercriminals are aware of it. With the emergence of AI, the risks have evolved even further, enabling attacks that can adapt and operate at an unprecedented scale. Over the period of 2024–2026, GCC banking regulations in the region are being influenced by the convergence of advanced ransomware, API-driven open banking risks and AI-enabled cyber threats.

Firstly, targeted ransomware and data extortion attacks against banks and fintechs in the Gulf region have evolved from isolated incidents into a persistent and systemic risk. Financial institutions in the UAE and across the GCC region have experienced a noticeable rise in incidents and malware activity through 2024 and into 2025 by nearly 100%, and this is specific to Paramount. . In response, regulators are tightening requirements for incident reporting timelines, operational resilience testing and recovery capabilities within central banks and national cybersecurity frameworks, with these requirements expected to become more stringent in 2026.

Secondly, the rapid expansion of open banking and digital transformation initiatives has made API security and cloud exposure critical regulatory concerns. Misconfigured cloud environments, weak API authentication, and complex third-party integrations are creating new attack surfaces that traditional perimeter-based security models cannot adequately protect. As a result, regulators in the UAE, Saudi Arabia, and other GCC countries are strengthening supervisory expectations around identity management, data protection and third-party risk management within banking regulations.

Additionally, the rise of AI-driven fraud and AI-assisted cyberattacks is reshaping how supervisors view the intersection of model risks and cyber risks. AI is being increasingly used to support credit assessment, KYC and fraud detection, while also being leveraged by attackers to scale phishing, social engineering and evasion techniques. This dual-use nature of AI is prompting regulators to develop guidance on AI governance, explainability and enhanced monitoring of AI-enabled processes in the financial sector.

What is one underrated cybersecurity innovation today that you believe will become critical for the Middle East’s BFSI sector over the next few years?

One of the most underrated cybersecurity innovations today, and yet one that is likely to become critical for the Middle East’s banking, financial services and insurance (BFSI) sector over the next few years, is behaviour-based analytics, which has become deeply integrated into security operations centre (SOC) functions and fraud detection systems. Numerous financial institutions still rely heavily on static, rule-based systems that trigger alerts based on fixed thresholds or known attack signatures. While effective against traditional threats, these approaches struggle to detect modern attacks that rely on lateral movement, living off the land (LOTL) techniques and sophisticated social engineering.

In contrast, behaviour-driven analytics establishs dynamic baselines for users, devices, applications and APIs. It continuously monitors the way accounts are accessed, transactions are executed and systems communicate, enabling early detection of anomalies that signal potential fraud or intrusion. These capabilities closely mirror the patterns observed in recent high-impact attacks on banks and fintechs across the region. For GCC banks navigating rapid cloud adoption, open banking frameworks and increasing use of AI in core operations, behavioural analytics is becoming essential. It allows institutions to distinguish legitimate high-volume digital activity from subtle intrusions, as highlighted in the report titled ‘2025 Global Digital Trust Insights – Middle East findings’.

Reflecting this shift, Paramount’s advisory and SOC services in the region are increasingly promoting a transition from purely rule-driven monitoring to a blended model that combines behavioural analytics, traditional rules, and threat intelligence. This integrated approach significantly improves detection speed and reduces false positives in complex Middle Eastern financial environments.

From the Paramount SOC’s perspective, approximately how many security incidents or threats have been monitored and mitigated this year

Over the last year we have issued over 592 critical advisories and mitigated them. Critical advisories are those that have the potential to halt business operations significantly.
The year 2026 has just begun, and we have issued nearly 100 advisories already.

Apart from critical advisories we have issued regular 318 advisories this year while the number stood at 2208 last year . We have just begun the year, but the number of alerts shows an increasing trend.

What types of cyber threats are most frequently detected and addressed by the SOC?

During the fiscal year 2024–2025, the most frequently detected threats identified by Paramount’s SOC include phishing and credential theft leading to account takeover, often using highly localised and AI-generated lures. SOC teams also regularly respond to ransomware and data extortion campaigns, alongside API, web application, and DDoS attacks targeting digital banking platforms. Moreover, cloud misconfigurations and excessive access permissions remain a persistent risk, frequently identified through continuous monitoring and threat hunting.

How can C-suite leaders better prepare their organisations, and what proactive steps should banks take to stay ahead of fraud and cyber threats?

For banks across the GCC region, C-suite leaders need to treat cyber resilience as a core board-level business capability, and not simply as a technical or IT function. With cyber threats having direct implications for financial stability, reputation, and regulatory compliance, leadership should embed cyber risk into enterprise risk management frameworks and board reporting. Major threat scenarios such as prolonged digital channel outages, data extortion incidents, or systemic third-party failures should be quantified and reviewed alongside credit and liquidity risks, in line with evolving GCC regulatory expectations. Leaders should further align their cyber strategies with national cybersecurity frameworks and central bank guidance, using independent maturity assessments to identify gaps and prioritise investments through 2026.

From an operational and technology perspective, adopting a zero-trust approach across identities, devices, networks and applications is becoming essential, particularly in API-enabled and cloud-based banking environments. This should be supported by strong SOC and incident response capabilities, whether in-house or through specialised providers such as Paramount, to ensure 24/7 monitoring, rapid containment and documented playbooks for both regulators and customers. Banks also need to invest in advanced fraud analytics and behaviour-based monitoring to detect account takeover and payment fraud, particularly as AI tools make phishing and social engineering more convincing, as witnessed in recent UAE ransomware trends.

Equally important is rigorous third-party and supply chain risk management. This includes structured security due diligence and continuous monitoring of fintech partners, cloud providers and critical vendors, given the growing risk of indirect compromised paths into Gulf financial institutions. Finally, C-suite leaders should actively promote a strong cyber resilience culture. This involves running realistic simulations of ransomware, data leaks, and payment fraud scenarios to sharpen organisational readiness and showcase proactive resilience to regulators, customers and shareholders.

Given the distinct regulatory, cultural, and operational landscape of the GCC, what makes cybersecurity in the region’s BFSI sector uniquely challenging compared to the US or Europe?

Cybersecurity in the GCC region’s BFSI sector is uniquely challenging because financial institutions operate at the intersection of rapid digital transformation, high geopolitical relevance and complex, multi-layered regulation. From a regulatory standpoint, institutions in the region must comply simultaneously with national cybersecurity authorities, central banks, and in some cases, free zone regulators. These entities impose detailed requirements on controls, data protection and incident reporting, creating a more fragmented and demanding compliance landscape than in many single-jurisdiction markets. The situation is further complicated by strict data residency and data sovereignty rules, which significantly influence how banks can design and deploy cloud, analytics, and cross-border platforms.

Operationally, GCC banks are advancing quickly into digital, mobile and open banking services, often faster than ecosystem-wide security maturity. While this supports financial inclusion, it also expands the attack surface through APIs, cloud services, and fintech partnerships. At the same time, the Gulf region has become one of the most actively targeted regions for financially motivated cybercrime and disruptive attacks, with banks and fintechs featuring prominently in 2024–2025 reports on ransomware, DDoS campaigns and sophisticated fraud schemes. The combination of rapid innovation, partner security, high attacker interest and evolving regulatory expectations creates a risk profile that is distinct from more established markets in North America and Europe.

In response, Paramount’s work with GCC BFSI clients focuses on developing region-specific security architectures and systems rather than simply importing models from other geographies. This includes designing frameworks aligned with local regulatory obligations, regional threat intelligence and the operational realities of Middle Eastern institutions as they evolve through 2026.

Financial

UAE finance has embraced AI, the returns now sit in the handoffs

Published

18 hours ago

October 20, 2026

Integrator Web-Editor

With Dubai fast-tracking agentic AI and AI use among DIFC financial firms rising sharply, Samir Akel, Regional Vice President, Emerging Markets at Nintex, sets out how orchestration turns agentic AI into results for UAE banks and insurers.

This week, much of the region’s technology community has gathered in Abu Dhabi for AI Everything, and the question on the show floor has moved on. A year ago, banks and insurers asked whether to deploy AI agents; today they want to know how to make those agents deliver results across an entire customer journey.

**Samir Akel**, **Regional Vice President, Emerging Markets, Nintex**

Government is setting the pace. On 5 October, the Dubai Future Foundation launched an agentic AI accelerator covering 33 government entities and more than 300 public-facing use cases, building on the federal target to run half of government services and operations on agentic AI within two years. Few countries have put a number and a deadline on agentic AI. The UAE has done both.

Finance is keeping up. The Dubai Financial Services Authority’s survey of 661 DIFC firms found that 52% now use AI, up from 33% a year earlier, while generative AI use rose by 166%; the regulator also noted that, for many firms, adoption is still at an early stage. UAE finance has AI in many places. The value comes when those pieces work together.

Work in financial services is fragmented

Follow a corporate account opening at a typical UAE bank. The application lands in a portal or a relationship manager’s inbox; documents and identity are checked, sanctions screening runs in a separate tool, a risk team reviews the file, a committee signs it off and operations sets up the account in core banking. That’s six steps, six systems and one waiting customer.

AI agents speed up individual steps: an agent can extract a trade licence in seconds or draft a risk summary in minutes. Then the file sits in a queue for a reviewer who has no idea it is ready. The task gets faster, while the journey stays as slow as its slowest handoff.

That gap is the coordination tax, made up of the hours lost chasing approvals, re-keying data and fielding “where is my application?” calls. In banking, insurance and payments, where one journey can cross half a dozen teams, it is often the largest cost nobody actually measures.

Process is the foundation

Institutions that turn AI into outcomes start by understanding how work actually runs, and regulated firms have a head start here because they already document their processes for supervisors. The task is to map those processes as they really operate (workarounds and exceptions included) and give each step to the right worker.

Steps that must run identically every time, such as sanctions checks and payment releases, suit rules-based workflow. Reading documents and reasoning over unusual cases suit AI agents. Judgement belongs to people. With the Central Bank’s AI guidance for the sector placing clear emphasis on human oversight, deciding where people sit in a process is now part of designing it.

Orchestration makes AI operational

Once the process is clear, orchestration connects it. It coordinates people, systems, data and agents across a whole journey, deciding who or what acts next and routing exceptions to the right person before they become delays.

Think of an airport, where more aircraft add capacity only when air traffic control sequences them. AI agents work in the same way.

For a bank or insurer, orchestration brings one view of every application, claim or payment. Core banking and policy platforms keep their role while work flows between them, and each orchestrated journey becomes a template for the next, so the tenth deployment goes live faster than the first.

A 90-day starting point

Finance can borrow the government’s 90-day rhythm. Pick one journey that crosses at least three systems and two departments, such as SME lending or a motor claim, and map it as it runs today. Count the handoffs and measure the time lost between them; that figure is your coordination tax. Then assign each step to a rule, an agent or a person, orchestrate the whole journey and track time to decision. Reuse what works.

The orchestrators will lead

At the accelerator launch, Digital Dubai’s Director General said the future of digital government depends on an integrated ecosystem that brings expertise, data and capabilities together. The same holds inside every bank.

Over the next year, the number of AI agent use cases across UAE banking and government will grow rapidly. The institutions that pull ahead will be those with a platform to orchestrate and govern those agents, taking them from pilot to production at scale, while keeping people in control. In the AI era, operational advantage belongs to the orchestrators.

Financial

Henry Dannell Expands into the Middle East with Launch of DIFC Representative Office

Published

2 days ago

October 19, 2026

Integrator Web-Editor

Henry Dannell, a specialist cross-border credit adviser, has announced its expansion into the Middle East with the opening of a representative office in Dubai International Financial Centre (DIFC), marking a significant milestone in the firm’s international growth strategy.

The move reflects rising demand for specialist advice among internationally mobile individuals whose financial interests increasingly span multiple jurisdictions, asset classes, and lending structures. As Dubai continues to strengthen its position as a global wealth and investment hub, attracting entrepreneurs, family offices, investors, and high-net-worth individuals from around the world, the complexity of managing wealth across borders has increased significantly. Many of these individuals now live, work, invest, and hold assets internationally, creating borrowing requirements that often extend beyond conventional lending frameworks.

Henry Dannell’s expansion into Dubai is designed to bring the firm’s specialist expertise closer to the region’s growing network of wealth advisers, family offices, tax specialists, legal professionals, and internationally connected clients.

Founded in 2019, Henry Dannell has built a reputation for delivering bespoke credit and lending solutions for clients with highly sophisticated financial circumstances. The firm’s advisers support a broad spectrum of clients, from business owners and entrepreneurs to ultra-high-net-worth individuals, helping them navigate complex borrowing scenarios that frequently involve multiple jurisdictions, unconventional income structures, and international assets. Unlike traditional mortgage providers, Henry Dannell operates as a specialist advisory business focused on structuring tailored credit solutions and working alongside trusted professional advisers to address complex financing requirements.

The establishment of the DIFC representative office represents the first phase of the company’s broader regional growth ambitions and will serve as a hub for relationship-building, market engagement, and collaboration with professional advisory communities across the Middle East.

Kem Kemal, CEO and Co-Founder of Henry Dannell, said: “Over the last decade, we have seen a fundamental shift in how wealth is created, managed, and deployed. Successful individuals are increasingly global in their outlook. They may operate businesses in one country, hold investments in another, and seek opportunities across several markets simultaneously. Yet lending has not always evolved at the same pace.”

He explained that too often, highly accomplished individuals with substantial assets and strong financial positions encounter challenges because their circumstances fall outside conventional frameworks. “Our role is to understand the complete picture and design bespoke solutions that reflect the realities of modern international wealth.”

“Dubai has become one of the most important centers for global capital, entrepreneurship and wealth advisory services,” he added. “Establishing a presence within DIFC allows us to be closer to the professional advisers and internationally connected clients we serve, while strengthening relationships across a region that continues to play an increasingly influential role in global finance.”

With over 165 years of combined industry experience across its advisory team, Henry Dannell has developed specialist expertise across residential, commercial, and specialist lending transactions. Through its Dubai presence, Henry Dannell aims to deepen engagement with the region’s professional advisory ecosystem while contributing to discussions around international wealth, investment, and cross-border financial planning.

Financial

The UAE’s Net Wealth Reaches $3.6 Trillion in 2025 and is Expected to Approach $6 Trillion by 2030, BCG Report Finds

Published

1 week ago

October 12, 2026

Integrator Web-Editor

The UAE’s net wealth grew by 12.7% between 2024 and 2025, rising from $3.2 trillion to $3.6 trillion, according to Boston Consulting Group’s (BCG) Global Wealth Report 2026: The Great Reordering. Total Net wealth is forecast to reach $6 trillion by 2030, with a CAGR of 10.6%. This represents an increase of more than $2.3 trillion over the next five years. The projected growth points to the UAE’s long-term wealth creation potential.

Financial wealth, including both investable and non-investable wealth, grew by 12.3% between 2024 and 2025, rising from $1.2 trillion to $1.4 trillion and is set to rise to $2.1 trillion by 2030 at a CAGR of 8.7%. Real assets reached $2.4 trillion in 2025 from $2.2 trillion in 2024, with projected growth to $4.2 trillion by 2030.

The findings show the resilience of the UAE wealth market amid a volatile global environment and heightened geopolitical uncertainty. “The ongoing conflict has introduced short-term volatility across Middle Eastern markets, with investor sentiment shaped by geopolitical uncertainty and oil-price movements,” said Lukasz Rey, Managing Director and Partner at BCG. “However, the region’s wealth development story remains structurally resilient over the five-year projection horizon. While we anticipate slightly lower growth over the next one to two years, a rebound is expected toward the latter part of the decade, supported by sovereign wealth strength, economic diversification agendas, family-business liquidity events, and continued private capital activity. We expect wealth managers to remain cautious in the near term; however, the long-term wealth opportunity in the Middle East remains intact.”

The report identifies a broader reordering underway across the global wealth-management industry, spanning geographic shifts, emerging-market wealth creation, intergenerational succession, and AI-driven operating model transformation.

Shifting Wealth Concentration Across UAE Population Segments

According to the report, the UAE’s financial wealth remains concentrated among high-net-worth individuals, with the composition of wealth expected to evolve by 2030 as more wealth accumulates within the lower high-net-worth segment. There are approximately 500 ultra-high-net-worth (UHNW) individuals, those with more than US$100 million in assets, in 2025, and they are expected to increase to around 800 by 2030, while their share of total financial wealth rises marginally from 26.3% to 26.5%. The upper high-net-worth segment (US$20–100 million) is forecasted to grow from approximately 2.7K to 4.2K individuals, with its share of wealth broadly stable at 7.4% in 2025 to 7.6% in 2030.

In contrast, the lower high-net-worth segment (US$1–20 million), which comprises approximately 200K individuals, is expected to increase its share of financial wealth from 29.3% in 2025 to 31.5% in 2030. The affluent segment (US$0.25–1 million) is expected to expand from approximately 500K to 600K individuals in 2030, while its share of wealth declines from 15.5% to 14.6% as wealth disperses across a larger base. The mass segment (below US$0.25 million) remains the largest by population, growing from roughly 8.6M to 9M individuals, but its share of financial wealth decreases from 21.5% to 19.8%.

The key UAE findings of BCG’s proprietary analysis are:

Financial wealth reaches $1.4 trillion in 2025, with strong projected growth to $2.1 trillion by 2030 (CAGR: 8.7%)
Real assets rose to $2.4 trillion in 2025 and are expected to hit $4.2 trillion by 2030 (CAGR: 11.5%)
Liabilities climbed to $220 billion in 2025 from $210 billion in 2024, with projections indicating $340 billion by 2030 (CAGR: 8.9%)
Cross-border financial wealth belonging to UAE residents and booked outside the UAE surged by 9.4% between 2024 and 2025 in the UAE, reaching $468.4 billion. It is forecasted to grow to $678.2 billion by 2030 with a CAGR of 7.7%.
Separately, the UAE continues to strengthen its position as a global wealth booking center, with cross-border wealth belonging to international clients and booked in the country reaching $721 billion in 2025, up 11.1% year-on-year.
Currency & Deposits, valued at $471.8 billion in 2025, is projected to grow to $778.9 billion by 2030, with a CAGR of 10.5%
Bonds are expected to reach $27.8 billion by 2030 from $15.9 billion in 2025, with a CAGR of 11.8%
Equities, valued at $419.4 billion in 2025, are expected to reach $591.9 billion by 2030 at a CAGR of 7.1%
Life Insurance & Pensions are valued at $26.6 billion in 2025 and projected to grow to $48.4 billion by 2030 (CAGR: 12.7%)

AI Is Reshaping the Economics of Wealth Management

BCG’s report finds that AI is beginning to reshape wealth-management economics and operating models. AI-powered tools are already drafting financial plans, automating compliance documentation, generating portfolio rationales, and predicting client churn. According to BCG analysis, AI-first wealth managers could unlock 25%–30% capacity gains across key workflows while increasing revenue per advisor by 15%–20%. The report argues that the industry is approaching a structural divide between firms redesigning workflows around AI agents and those layering AI tools onto legacy processes.

“The UAE’s wealth pool is set to grow by more than $2 trillion over the next five years, and the constraint on capturing that growth is advisor capacity rather than client demand,” said Mohammad Khan, Managing Director and Partner at BCG. “Firms that are redesigning their workflows around AI agents are creating the headroom to serve a larger client base without diluting the quality of advice. Those layering AI onto legacy processes are paying for the technology without changing their economics, and that gap widens the longer it is left.”

Wealth managers face a choice between adapting incrementally and committing to an AI-first future, with the report identifying the latter as the more sustainable approach. Key priorities include:

Map value chain exposure: Identify rules-based, templatized processes most vulnerable to automation. Distinguish truly bespoke, relationship-dependent work from structured, repeatable tasks to guide investment decisions.
Attack high-cost workflows: Scale AI now in financial planning, portfolio management, and compliance, automated drafting, AI-generated rationales, knowledge assistants.
Rebuild the advisor experience around AI: Integrate next-best-action prompts, retention alerts, automated documentation, and personalized outreach into a unified system.
Encode institutional knowledge into agents: Pair top practitioners with engineers to build and refine AI agents. Embed advisor judgment into today’s agents, without centralized ownership and outcome-based evaluation, differentiation erodes.
Prepare the tech stack for agents. Introduce a decoupled data layer separating operational systems from data consumption, delivering real-time, API-accessible data while maintaining deterministic control through transaction systems and rules engines.