Osama Alzoubi, Vice President for the Middle East and Africa at Phosphorus Cybersecurity
Cybersecurity threats within the Gulf Cooperation Council (GCC) are increasing rapidly due to three interconnected trends: the surge in connected devices, the emergence of AI-driven cyberattacks, and the easy availability of ready-to-use hacking tools. The infrastructure in the region, which includes everything from airport surveillance systems to smart oil refinery sensors, heavily relies on an extended network of Internet of Things (xIoT) devices—integrating printers, displays, drones, robotics, and more. Alarmingly, organizations in the Gulf now operate with an average of 13 xIoT devices for each conventional IT asset, many of which lack built-in security features.
The introduction of generative AI has altered the dynamics of cyber threats, enabling even those without advanced skills to conduct sophisticated attacks. Reports from various outlets reveal that hackers are now using AI-generated malware, which adapts dynamically and can create polymorphic code through natural language interfaces. These advancements lower barriers for attackers, allowing virtually anyone with access to cybercrime-as-a-service resources to compromise devices easily—be it an improperly secured thermostat, an outdated printer, or an unsecured smart camera.
For Chief Information Security Officers (CISOs) and decision-makers in the region, the implication is clear: xIoT represents a significant vulnerability in our digital framework. Immediate adoption of intelligent, automated defenses specifically designed for this unique threat landscape is critical; otherwise, we risk exposing our essential systems to severe disruptions.
The Challenges of xIoT Security: Urgent and Complex
Securing traditional IT has always presented challenges, yet the xIoT environment introduces an additional layer of complexity due to its immense fragmentation and scalability. Unlike IT systems that typically rely on a small number of primary vendors, xIoT networks involve devices from countless manufacturers, each with specific firmware, communication protocols, and update cycles. There is no uniformity or standard language, leaving little margin for mistakes.
Moreover, the overwhelming number of devices adds to the challenge. Hospitals depend on interconnected infusion pumps and imaging technologies, smart buildings operate on digital thermostats and lighting controls, and crucial infrastructure utilizes embedded sensors for managing oil production and water systems. These devices frequently operate on firmware rather than conventional operating systems like Windows or Linux, rendering traditional IT management tools ineffective. The complexity prevents the installation of management agents or scanning tools, often leaving these devices unmanaged until vulnerabilities are exploited.
This situation creates an operational nightmare. A single IT professional might manage 100 conventional endpoints, but applying the same oversight model to xIoT would necessitate large teams of specialists—something that is currently impractical amidst a global cybersecurity skills shortage.
The risks are evident; in 2025, several incidents throughout the GCC exploited outdated or improperly configured xIoT devices. Cybercriminals leveraged outdated firmware and default passwords to infiltrate networks — everyday devices like printers, CCTV cameras, and smart HVAC controls were exploited to access high-value targets.
Between March and May 2025, a series of attacks highlighted the urgent nature of these risks. In one instance, attackers gained access through a printer with outdated firmware to infiltrate building control systems—a tactic facilitated by the fact that 36 percent of IT teams postpone printer software updates, as noted in an HP Wolf Security report.
Additionally, hackers took control of unprotected security cameras in a smart city initiative, exploiting open ports and default passwords. Research from Trend Micro and Security Magazine indicated that over 40,000 security cameras were exposed to the public internet as of June 2025.
Implementing Intelligent Security at Scale: The Phosphorus Approach
Phosphorus has developed a platform that reimagines xIoT security—making it straightforward, scalable, and precise. Our approach provides targeted defense without interrupting network operations, requiring no extra hardware, agents, or mirrored traffic; it’s intelligent protection delivered at machine speed.
Our platform utilizes Intelligent Active Discovery, which efficiently scans millions of IP addresses within hours to discover each connected device present in the network. We analyze each endpoint to determine its communication protocol and whether it is still operating on default credentials. We compile exhaustive profiles that include details such as vendor, model, firmware version, and open ports.
The Phosphorus Enterprise Platform goes beyond simple device visibility. It empowers both security and IT teams to implement large-scale remediation across the extended IoT (xIoT) ecosystem. With capabilities to patch firmware, change credentials, and rectify misconfigurations at machine scale, the future of the GCC is being shaped by smart cities, AI-driven healthcare, autonomous systems, and interconnected enterprises, all powered by the expanding xIoT landscape.
Every intelligent streetlight, connected medical device, or industrial sensor presents a potential vulnerability for cyber attackers. Securing this emerging digital frontier necessitates more than standard defenses. Comprehensive governance, robust auditing, strict policies, and regulatory frameworks are essential to safeguard national infrastructure across more than one million device types. Phosphorus delivers security with unmatched speed, efficiency, and scale. This transcends traditional security; it signifies operational transformation. Our clients benefit from comprehensive visibility, accelerated control, and quantifiable risk reduction, leading to enhanced defenses, improved operations, and more secure futures.
The Emergence of Smart Cities in the Gulf Supported by xIoT
Over the last decade, Saudi Arabia and the UAE have established themselves as leaders in smart services and smart city innovation, with airports representing the pinnacle of this digital revolution. These hubs are not merely transit points; they exemplify the synergy of xIoT. From biometric check-ins and AI-driven immigration controls to real-time baggage tracking and autonomous kiosks, each component is interconnected, responsive, and designed for efficiency, creating a seamless experience supported by a network of devices that function in harmony—this signifies not just innovation, but national ambition made tangible, establishing a global standard for smart mobility.
Beyond airport terminals, the smart city infrastructure in the Gulf is rapidly evolving into one of the most connected environments worldwide. IoT and xIoT devices constitute the digital backbone of contemporary urban infrastructure, enabling adaptive traffic systems that can learn from congestion patterns and adjust flow in real time. They facilitate proactive energy management by monitoring and regulating usage across city grids, cater to waste management, conserve water, monitor environmental conditions, and support digital public safety networks. Modern smart cities are alive with devices that sense, react, and optimize—from responsive streetlights to intelligent parking systems that direct drivers where to find available spaces.
Across cities like Riyadh, Jeddah, Dubai, Doha, and Abu Dhabi, this vision goes beyond airports. Urban areas are interconnected with IoT and xIoT devices that enhance traffic management, utility control, and emergency responses, with sensors overseeing energy grids and actuators adjusting traffic signals. AI technologies dynamically coordinate services, defining a new standard of digital living—responsive, resilient, and prepared for future challenges.
This connected advancement was not achieved overnight; it results from strategic investments, public-private partnerships, and visionary leadership. The Gulf is proactively creating the future rather than simply responding to it.
Establishing Strong Foundations: The Essential Task of Securing xIoT
Regional governments have demonstrated their commitment to cybersecurity leadership. Saudi Arabia’s National Cybersecurity Authority (NCA) has established guidelines such as Cybersecurity Guidelines for IoT (CGIoT), Essential Cybersecurity Controls (ECC), and Operational Technology Cybersecurity Controls (OTCC). Meanwhile, the UAE’s Cybersecurity Council leads initiatives to safeguard digital services and critical infrastructures.
Nevertheless, the evolving threat landscape necessitates higher degrees of governance, including auditing and enforcement of established policies and regulations, especially as the future of the GCC relies heavily on smart cities, automated systems, AI-enhanced healthcare, and interconnected enterprises all powered by xIoT.
The Role of AI in Transforming Cybersecurity Resilience
The vast number and diversity of IoT devices make human-driven security operations impractical. These devices come in various forms, often with limited computing power, proprietary communication protocols, and extended lifespans, frequently installed and then forgotten by third-party providers.
Ownership over these devices remains ambiguous, monitoring is minimal, and security hygiene is often inconsistent at best—until now.
Phosphorus is innovating a method to fortify the most vulnerable aspects of our customers’ infrastructures through its xIoT Security and Management Platform—an AI-enabled, agentless solution that offers proactive protective measures across IoT, Operational Technology (OT), Industrial IoT (IIoT), and Internet of Medical Things (IoMT), or xIOT environments. Imagine a scenario where every device on your network can be automatically discovered, evaluated, and remediated at scale, requiring minimal manual intervention. This includes AI-driven device discovery, deep insights guided by human-defined policies, and enforcement enabled through AI automation.
With our proprietary Intelligent Active Discovery engine, Phosphorus achieves unparalleled accuracy in identifying devices and classifying them in detail at an extraordinary scale, enabling immediate visibility and continuous posture monitoring. Our systems can identify vulnerabilities and prioritize risks arising from outdated firmware, default credentials, insecure configurations, and gaps in digital certificates, while automated remediation features empower organizations to modify credentials, patch software, and isolate at-risk assets.
We envision a future where overcoming the current staff shortages related to managing device deployments is no longer a concern. By automating manual tasks, technicians can shift their focus to more strategic roles. They can efficiently inventory, assess risks, remediate vulnerabilities, and manage millions of devices more effectively. The transition from labor-intensive processes to automated operations enables a far greater impact and allows staff to become more proficient and efficient.
As countries throughout the GCC and MENA region accelerate their digital infrastructure and smart city development, Phosphorus delivers the cyber-physical resilience demanded by Chief Information Security Officers (CISOs), Chief Information Officers (CIOs), and government leaders tasked with securing national assets and critical systems against increasing threats.
Forming Strategic Alliances in the Gulf
Phosphorus is not merely a vendor; we view ourselves as partners. Across the Gulf, we have formed strategic collaborations with government bodies, investment ministries, and leading enterprises. We contribute to high-level discussions between U.S. and GCC stakeholders, aligning innovation with national objectives.
Our engagements are intended for the long term, are confidential, and focus on tangible results, not surface-level optics. Whether in healthcare, finance, logistics, or smart infrastructure, we are dedicated to helping organizations safeguard what is most important.
Real-World Applications: Achieving Scale Without Disruption
A leading healthcare network discovered hidden risks from unmonitored infusion pumps and outdated firmware vulnerabilities. The Phosphorus platform identified every device, assessed their risks, and implemented fixes without interrupting patient care.
A major financial institution with 30,000 interconnected endpoints lacked visibility into its xIoT environment. We mapped every device and rectified critical security gaps, resulting in not just compliance but also heightened confidence.
In a significant Gulf smart city where devices were being deployed faster than they could be secured, we provided live asset mapping, change alerts, and real-time control, resulting in an infrastructure that is now monitored, protected, and prepared for future challenges.
Final Thoughts: The Time for Action is Now
The GCC is transforming the possibilities of digital infrastructure, pushing the boundaries of innovation across various sectors. However, this significant advancement comes with the pressing responsibility to protect the systems that enable this transformation. The rise of xIoT signifies not just a technological advancement but a profound change that requires a new, intelligent security framework designed for speed, scale, and sophistication.
At Phosphorus, we take pride in being at the vanguard of this transition. We are not waiting for the future; we are actively implementing advanced security solutions today. Together, let us ensure that the digital future of the Gulf and MENA is not only visionary but also secure.