Tashkent, Uzbekistan (UzDaily.uz) — Social engineering, phishing and ransomware will remain among the main threats to businesses over the next 12 months, while the spread of artificial intelligence will allow attackers to improve their methods and lower the entry barrier for people with limited technical knowledge. This was discussed by participants of the “Universe of Secure Payments” panel at the Fintech in Security 2026 conference in Tashkent.
The discussion was attended by Turon Bank Information Security Service Head Bekhzod Dekhkanov, Apex Bank Deputy Chairman Timur Emirsaliyev, Korzinka.uz Information Security Service Head Alexander Zorin, Asakabank Information Security Service Head Zohir Mirzayev and Fayoz Bakhadyrov, senior expert at the Central Bank’s CERT-CBU Cybersecurity Center. The session was moderated by international cybersecurity expert Arkady Prokudin, a representative of Compliance Control & Rakasta.
According to the participants, the nature of many cyberattacks is changing more slowly than the technologies used to carry them out. In particular, attackers are increasingly using multi-stage phishing schemes, including those distributed through Telegram.
Artificial intelligence is also becoming an additional tool for attackers. According to the speakers, it now enables people who previously lacked the necessary knowledge to create moderately sophisticated malicious software. At the same time, threats may become less noticeable: instead of a single large-scale attack that takes a long time to prepare, attackers can increasingly use numerous small incidents that are more difficult to detect.
AI is also actively being used by teams responsible for protecting information systems. One participant noted that a task that took between 10 and 30 hours to complete two years ago can now be performed in less than 1.5 hours. According to the speaker, automation without artificial intelligence is already becoming practically impossible.
At the same time, companies are not yet prepared to rely on AI without additional oversight. In particular, software code generated with its assistance continues to be reviewed by specialists, although the industry is gradually moving towards a higher level of automation.
The session also focused on cybersecurity financing. Business representatives were advised to begin justifying security spending by assessing the cost of downtime for the company or an individual business area over a day, week or month. A figure of 10% of the corresponding amount was cited as a minimum benchmark for information security spending.
According to one speaker, security spending typically accounts for 10–15% of an IT budget. Regulatory fines for security violations can also provide an additional argument when discussing cybersecurity funding.
Experts also urged companies not to purchase security solutions simply because competitors use them. Companies should first identify their own risks and then select tools to mitigate them.
Participants cited dependence on key employees as one potential risk. If one specialist is responsible for a significant number of processes, companies should determine in advance what action to take if that employee leaves.
Speakers identified a compliance audit against relevant standards as a first step for businesses, particularly companies entering international markets. According to them, many such standards have significant areas of overlap and are based on a risk-oriented approach.
At the same time, there is no universal solution that can simultaneously provide high speed, security and low cost. Participants used smartphone protection as a simple example: a six- or eight-digit password is more secure than a four-digit one, but less convenient to use. Businesses therefore have to find a balance between convenience, the level of protection and costs.
Another challenge for information security teams is introducing new solutions without disrupting existing services. To address this, companies train specialists and explain the practical benefits of proposed changes to business units in advance.
Participants also highlighted a staffing problem. Companies recruit students and train them to become specialists, but some employees move to other employers after gaining experience.
As an additional security measure, experts recommended that companies regularly engage external specialists to conduct penetration tests of their own products and systems.
