Azernews.Az

Nazrin Abdul

Read more

The surge in cyberattacks globally and in Azerbaijan is an urgent concern for governments, businesses, and individuals alike. A recent notable event occurred on March 20 when the Global Media group fell victim to a cyberattack, which serves as a stark reminder of the vulnerability of the media sector. These types of attacks, targeting the media, pose a particularly dangerous risk to information integrity and public trust, as they can manipulate or disable communication channels that are crucial for democratic societies.

In Azerbaijan, cybersecurity has become an increasingly important focal point, with rising threats prompting action at the highest levels. One of the key platforms for addressing these issues is the annual "V Summit of IT Leaders of State Institutions," held on February 21 in Baku. This event, established by the State Service for Special Communications and Information Security (SSSCIS) in 2023, gathers top information security officials from state institutions to discuss emerging challenges, share knowledge, and propose solutions. The significance of the summit cannot be overstated, as it provides a venue for critical discussions on the evolving cybersecurity landscape and the importance of strengthening defense mechanisms.

At the summit, Allahveren Ismayilov, Deputy Head of the State Service for Special Communications and Information Security (SSSCIS), emphasized Azerbaijan's progress in fortifying its cybersecurity framework. The country has taken significant steps in recent years, notably in securing high-profile international events such as the 29th Conference of the Parties to the UN Framework Convention on Climate Change (COP29) and the presidential and parliamentary elections. These events demonstrated Azerbaijan's capacity to manage large-scale information security operations and safeguard sensitive data.

Azerbaijan is also focusing on improving its regulatory frameworks. In 2024, the country approved a list of critical information infrastructure and developed new legal measures for protecting state information resources. Ismayilov highlighted that 2025 would be a pivotal year for implementing the "Strategy of the Republic of Azerbaijan on Information Security and Cybersecurity for 2023-2027," with key milestones expected to be achieved, further underscoring the nation’s commitment to enhancing its cybersecurity posture.

The growing threat landscape

Tural Mammadov, Head of the Department of the SSSCIS, shared alarming statistics that underscore the scope of cyber threats faced by Azerbaijan. In 2024, over 3 million emails were processed through the state email service, with 7% of these emails blocked due to malicious content. This highlights the increasing sophistication of cyber threats and the critical need for robust detection and mitigation systems.

The rise in information security gaps and vulnerabilities within state information resources was also notable. Mammadov reported 857 notifications sent to state institutions about potential leaks and security gaps, alongside 298 information security audits. This indicates a growing awareness of the need for proactive risk management and response to emerging threats.

The detection of fake domains resembling those of 100 state institutions further highlights the persistence of cybercriminals. Such incidents are not isolated; they represent a broader trend of foreign and domestic threats aimed at compromising national security. For instance, the preparation of a phishing attack on the "Report.az" news outlet, which was intercepted by the SSSCIS, may have been an early indication of the cyberattack on March 20. Mammadov’s statement about the identification of a fake domain, “govaz.am,” underscores the regional dynamics of cyber threats, particularly from neighboring countries.

The scale of cyberattacks and defensive measures

Azerbaijan’s efforts to block cyber threats in 2024 were significant. Over 814 million malicious connections were blocked on the “AzStatenet” network, which serves state institutions, and more than 4 million electronic files were scanned and cleared of malware by the centralized antivirus system. The proactive nature of these defense measures is further evident in the identification and blocking of over 1,000 cyberattack indicators, which highlights the country's commitment to staying ahead of potential threats.

Despite these successes, the rising number of cyberattack attempts calls for continual vigilance and adaptation. The threats faced by Azerbaijan are not only technological in nature but are also becoming increasingly sophisticated, often involving social engineering tactics like phishing, which exploit human vulnerabilities. This highlights the need for more comprehensive cybersecurity education, as well as stronger partnerships between government agencies, private sector companies, and international allies.

Future outlook: The information security risk register

One of the most promising developments discussed at the summit was the creation of Azerbaijan's Information Security Risk Register. This platform, still in development, will provide a comprehensive catalog of threats and solutions, similar to the widely used "Mitre Attack" platform. By offering detailed information in Azerbaijani, this registry will empower organizations to better understand and mitigate risks specific to their environments. The creation of such a platform is a critical step toward a more informed and coordinated approach to cybersecurity.

Azerbaijan’s cybersecurity strategy is evolving rapidly in response to the growing threat landscape. The government’s proactive steps, including the development of a robust legal framework, the implementation of advanced defensive technologies, and the creation of the Information Security Risk Register, will help safeguard the nation’s digital infrastructure. However, as the cyber threat landscape continues to evolve, Azerbaijan must remain agile, continually adapting its strategies to counter new threats. The collaboration between state institutions, the private sector, and international partners will be crucial in ensuring the long-term success of Azerbaijan’s cybersecurity initiatives and protecting the nation from increasingly sophisticated cyberattacks.