Mannai CDRC

Mannai CDRC Mannai CDRC is a dedicated SOC lauched on 20th November, 2022 to commemorate FIFA Qatar 2022. Stay tuned.

Mannai CDRC (Cyber Defence Resilence Center) hailed as novel venture powered by Mannai ITSolutions, to provide a secured & seamless managed service to our customers.

 The biggest cyber threats are often the ones you never see coming.Compromised credentials, leaked corporate data, expos...
19/05/2026



The biggest cyber threats are often the ones you never see coming.
Compromised credentials, leaked corporate data, exposed assets, and stolen information continue to circulate across dark web forums, encrypted channels, and hidden communities long before organizations realize they’ve been exposed.
Traditional security tools focus on defending the perimeter. But modern cybersecurity requires visibility far beyond it.
With SOCRadar® Extended Threat Intelligence, organizations gain continuous dark web visibility through:
• Automated threat intelligence collection
• Structured monitoring across hidden sources
• Integrated detection and response workflows
• Real-time visibility into leaked credentials and exposed data
• Actionable intelligence delivered directly into security operations

By continuously monitoring dark web activity, organizations can identify compromised credentials early, detect emerging risks faster, and take proactive action before threats escalate into operational or reputational damage.
At , these advanced dark web monitoring capabilities are embedded into our integrated cybersecurity strategy through the expertise of helping organizations strengthen cyber resilience with proactive threat intelligence, continuous monitoring, and real-time security operations tailored for today’s evolving threat landscape.

| | | | |
Chayma Ben Lachheb | Mariia Lysenko | Murad Hamed | Cihan Ethem Demir

| | |
Hisham Alkhusheiny | Sanu Gopinath | Titus Kannan | Sandeep John | SALMA BEGUM NAZEER BASHA

  Defense alone doesn’t stop modern cyber threats.The real advantage comes from seeing threats before they become attack...
12/05/2026



Defense alone doesn’t stop modern cyber threats.
The real advantage comes from seeing threats before they become attacks. As cybercriminals continue to evolve their tactics, organizations need more than reactive security tools. They need continuous visibility across their external ecosystem, proactive intelligence, and the ability to identify risks before operations, reputation, or critical assets are impacted.

With SOCRadar® Extended Threat Intelligence, organizations gain a broader view of the threat landscape through:
• AI-powered Cyber Threat Intelligence (CTI)
• External Attack Surface Management (EASM)
• Digital Risk Protection
• Continuous Dark Web Monitoring
• Threat Hunting & Early Threat Detection
This intelligence-driven approach helps businesses uncover exposed assets, monitor emerging threats, detect leaked credentials, and proactively reduce cyber risk before attackers can exploit vulnerabilities.

At , these advanced capabilities are integrated into our cybersecurity strategy through the expertise of enabling organizations to strengthen cyber resilience with proactive monitoring, intelligent threat visibility, and security operations designed for today’s evolving digital landscape. Because cybersecurity is no longer just about reacting to attacks. It’s about detecting risks early, acting proactively, and protecting what matters most.

| | | |
Chayma Ben Lachheb | Mariia Lysenko | Murad Hamed | Cihan Ethem Demir

| | |
Hisham Alkhusheiny | Sanu Gopinath | Titus Kannan | Sandeep John | SALMA BEGUM NAZEER BASHA

 AI isn’t your biggest risk problem, your lack of governance around it is.Data security in the AI era is no longer just ...
14/04/2026



AI isn’t your biggest risk problem, your lack of governance around it is.
Data security in the AI era is no longer just a technology challenge,
It’s a human one.
With sensitive data now distributed across email, cloud, SaaS, and collaboration platforms, traditional security approaches are struggling to keep up, especially in environments shaped by both humans and AI. Insights from highlight several critical realities, as elucidated below:

-AI has officially outgrown our legacy security models.
Treating it like “just another app” is a strategic error.
-Every prompt is a potential data leak.
Every AI agent is a high‑privilege insider.
-Attackers are already AI‑native, using prompt injection, model manipulation, and API abuse.
The real vulnerability isn’t the technology; it’s weak oversight.
-Shadow AI, excessive access, and poor data classification are self‑inflicted wounds.
If you can’t see how AI is being used, or what data it touches, you don’t have control.
-Innovation without guardrails isn’t bold. It’s reckless.
Security must shift upstream, at prompt time, training time, and inference time.
-AI security is about both applications and data. Ignore either and you lose.
AI will reward the governed, and punish the reckless. Choose wisely.

| | | | |
Emile Abou Saleh | Imad Chamoun | Firas Al Tamimi | Raafat Kastoun

| | | |
Muhammed Ashraf | Nijo David | Jobin John | Roney Rajan | Jaikrishnan Vijayan

| | | |
Hisham Alkhusheiny | Sanu Gopinath | Titus Kannan | Sandeep John | SALMA BEGUM NAZEER BASHA

 Cybersecurity shouldn’t start after the damage is done.It should stop threats before they happen.Traditional threat int...
07/04/2026



Cybersecurity shouldn’t start after the damage is done.
It should stop threats before they happen.
Traditional threat intelligence is often reactive, its effective, but late.
Today’s threat landscape demands early visibility, context, and foresight.

With SOCRadar® Extended Threat Intelligence, organizations shift from reacting to anticipating threats by combining:
• AI-powered Actionable Cyber Threat Intelligence (CTI)
• External attack surface visibility
• Continuous Dark Web monitoring
All delivered across the surface, deep, and dark web in real time.

At , this intelligence‑led capability is embedded into our Integrated Cybersecurity Defense Strategy, executed by the team.
Because awareness is the first control and verification is the final line of defense.
True cybersecurity doesn’t begin after a breach, it prevents one.

| | | | |
Chayma Ben Lachheb | Mariia Lysenko | Murad Hamed | Cihan Ethem Demir

| | | |
Hisham Alkhusheiny | Sanu Gopinath | Titus Kannan | Sandeep John | SALMA BEGUM NAZEER BASHA

| | | | |
Wagdy ElShahawy | Mohamed Jdir | Asgar Ali |Prem Krishna |Sham Alrashed

 Social engineering is no longer limited to the digital world.As highlighted by Proofpoint’s human‑centric security rese...
01/04/2026



Social engineering is no longer limited to the digital world.

As highlighted by Proofpoint’s human‑centric security research, attackers increasingly target people, not just systems, by exploiting trust, context and human behavior. While many organizations focus on email and digital threats, in‑person impersonation remains a powerful and often overlooked attack vector.
In physical environments, imposters may pose as employees, contractors, or service providers to blend in, create urgency, or exploit social norms. These scenarios are designed to pressure individuals into bypassing access controls or making exceptions, often with no technical compromise required. Remaining vigilant is essential. Always verify identities, follow access control procedures, and never bypass security protocols, no matter how convincing the situation may seem.

A moment of caution can prevent a serious breach.
Strengthen your digital defenses and safeguard your business with an Integrated Cyber Security Defense Strategy from .
Building awareness. Strengthening resilience. Mannai CDRC

| | | | |
Emile Abou Saleh | Imad Chamoun | Firas Al Tamimi | Raafat Kastoun

| | | |
Muhammed Ashraf | NIJO DAVID | Jobin John | Roney Rajan | Jaikrishnan Vijayan

| | | |
Hisham Alkhusheiny | Sanu Gopinath | Titus Kannan | Sandeep John | SALMA BEGUM NAZEER BASH

 Dark web activity is increasing at an alarming pace, creating new risks for organizations worldwide. As cybercriminals ...
24/03/2026



Dark web activity is increasing at an alarming pace, creating new risks for organizations worldwide. As cybercriminals evolve with AI‑driven, identity‑focused, and malware‑free attack methods, the importance of proactive defense grows even more critical.
SOCRadar® Extended Threat Intelligence platform monitors hacker forums, Telegram channels, IM platforms, dark markets, and more to identify emerging risks early, before they escalate into severe incidents. SOCRadar’s Advanced Dark Web Monitoring highlights how threat actors actively trade leaked credentials, financial data, and PII, making data leaks one of the most exploited attack vectors. With capabilities that include real‑time alerts, underground chatter tracking, stealer‑log detection and monitoring for stolen credit cards, attackers increasingly prioritize high‑value, accessible data sources that can be weaponized quickly and quietly.
In today’s threat landscape, awareness is your first control and verification is your final line of defense. This principle is at the heart of Integrated Cybersecurity Defense Strategy, diligently executed by our crew to safeguard what matters most.

| | | | |
Chayma Ben Lachheb | Mariia Lysenko | Murad Hamed | Cihan Ethem Demir

| | | |
Antony Sebastian | Alifia Imam Abidi |Nour Jabbour |JIKKU THOMAS | Khaled Khaleel

| | | | |
Sunil Mathew | Vinod EAPEN

  |   Whaling Threats Protect Yourself and Your OrganizationWhaling is targeted business email compromise (BEC) aimed at...
13/01/2026

|

Whaling Threats Protect Yourself and Your Organization
Whaling is targeted business email compromise (BEC) aimed at executives and decision makers. Elucidated below are real world examples which attackers use frequently:

Recognize the red flags
• Urgent payment or data requests : Sudden requests for immediate wire transfers, vendor invoice changes, or payroll updates.
• Emails impersonating senior leadership : Messages that mimic a CEO/CFO tone, signature, or writing style (CEO fraud).
• Unusual domains or reply‑to addresses: Look alike domains or reply‑to addresses that don’t match the sender’s organization.
• Requests to bypass normal procedures: Pressure to skip approvals, disable controls, or use personal channels for corporate transactions.
• Out of band anomalies: Unexpected calendar invites, LinkedIn DMs from “colleagues,” or shared cloud links asking for credentials.

Technical controls and process hardening
• Email authentication: Enforce SPF, DKIM, and DMARC with a reject/quarantine policy to reduce domain spoofing.
• Multi‑factor authentication (MFA): Require MFA for all privileged accounts and remote access to limit account takeover.
• Least privilege and separation of duties: Restrict who can approve payments and require dual authorization for high‑value transfers.
• Out of band verification: Verify payment or data requests via a known phone number or secure channel, not by replying to the email.
• Disable auto‑forwarding and external rules: Block automatic forwarding of corporate email to personal accounts.
• Threat detection: Tune SIEM/EDR to flag anomalous sender behavior, new forwarding rules, and unusual login locations.
• Domain monitoring and takedown: Monitor lookalike domains and register defensive domains; use brand protection services to remove malicious sites.

Whaling is not a phishing email, it’s a targeted strike. Awareness is your first control; verification is your last line of defense. And it’s the cornerstone of Integrated Cybersecurity Defense Strategy, religiously practised by Mannai’s cybersecurity experts, to protect what matters most.

| | | | |
Emile Abou Saleh | Imad Chamoun | Firas Al Tamimi | Raafat Kastoun

| | | |
Muhammed Ashraf |

| | | |
Sunil Mathew | Vinod EAPEN

 Verify Before You TrustAs social engineering tactics evolve, attackers are increasingly using Telephone Oriented Attack...
28/12/2025



Verify Before You Trust
As social engineering tactics evolve, attackers are increasingly using Telephone Oriented Attack Delivery (TOAD) to deceive users through phone calls initiated via email or SMS. These attacks rely on urgency and misplaced trust, making awareness and verification essential. At , we promote a prevention-first approach that helps reduce risk before damage occurs.

Protect yourself from TOAD attacks by:
• Being wary of messages that ask you to call a provided number
• Verifying phone numbers through trusted sources or saved contacts
• Pausing before responding to urgent or unexpected calls

Verification isn’t delay, it’s defense. And it’s the cornerstone of our Integrated Cybersecurity Defense Strategy, religiously followed by Mannai’s cybersecurity experts, to protect what matters most.

| | | |
Emile Abou Saleh | Imad Chamoun | Kenan Abu Ltaif

I | |
Firas Al Tamimi | Elie El Fallah | Raafat Kastoun |Joe Sykora

| |
Ahmed Sarraj | Mark Bennett | Jerome Jullien

| | |

| | |
Sunil Mathew

| | | |
Vinod EAPEN

 Prevention is the New PerimeterIn today’s rapidly evolving threat landscape, ransomware is no longer a matter of “if” b...
11/12/2025



Prevention is the New Perimeter
In today’s rapidly evolving threat landscape, ransomware is no longer a matter of “if” but “when.” As attacks grow more targeted and evasive, reactive defenses alone are no longer sufficient. True cyber resilience begins with proactive prevention.
At , we advocate a layered, prevention-first approach to ransomware defense, one that transforms awareness into action and hygiene into habit.

Minimize your ransomware risk with these essential practices:

• Adopt a multi-layered defense strategy tailored to your threat profile
• Keep all systems and applications up to date to close known vulnerabilities
• Enforce multi-factor authentication (MFA) to protect identities and access
• Deploy robust endpoint protection with real-time threat detection and response

These foundational controls significantly reduce exposure to ransomware, helping you avoid costly downtime, data breaches, and compliance violations.
Prevention isn’t just a tactic, it’s a mindset. And it’s the cornerstone of our Integrated Cybersecurity Defense Strategy, designed by Mannai’s cybersecurity experts to protect what matters most.

| | | |
Firas Al Tamimi | Elie El Fallah | Raafat Kastoun | Ahmed Sarraj | Mark Bennett | Jerome Jullien

I | |
Hisham Alkhusheiny | Sanu Gopinath | Titus Kannan | Sandeep John | SALMA BEGUM NAZEER BASHA
Antony Sebastian | Alifia Imam Abidi |Nour Jabbour |JIKKU THOMAS | Khaled Khaleel

| |
Suhana Ashraf | Benshi Jalal | |NIJO DAVID |Jobin John |Roney Rajan

| | |
Mohamed SALLAM| Ayman Edris | Mohammed Omar Al-Qurashy | Khalil Khalil | Loubna El Tawil

| | |
Robin K Varghese| Jaikrishnan Vijayan | Gladly Joseph| Ajith Varghese

| | | |
Sunil Mathew| Vinod EAPEN | Emile Abou Saleh | Imad Chamoun | Kenan Abu Ltaif

  PCI SSC announced modifications for merchants validating to Self-Assessment Questionnaire A (SAQ A).✅ Requirements 6.4...
08/05/2025



PCI SSC announced modifications for merchants validating to Self-Assessment Questionnaire A (SAQ A).

✅ Requirements 6.4.3, 11.6.1, and 12.3.1 removed from SAQ A scope.
✅ Merchants must ensure script-based attack protection.
✅ Applies to iframe & redirect setups—no e-commerce exceptions.
✅ Compliance burden shifts to third-party providers.
✅ Reduced need for script management tools = more efficiency.

💡 Whether you're a small business or enterprise, adapting to PCI DSS changes helps safeguard customers, minimize risks, and streamline operations.

| I |

Mohamed Allam | Sandeep John | SALMA BEGUM NAZEER BASHA | Gayathri Pothiraj | Robin K Varghese

Khayala Mammadova | Ahmed Al-hams | Sanu Gopinath | Muhammad Hashir TP | Mansoor Sulaiman

Mannai CDRC I

Ayham Al Rebdawi | Wagdy ElShahawy | Khaled Ghaleb | JIKKU THOMAS | Hisham Alkhusheiny

Ahmed Waly | Khaled Khaleel |Titus Kannan |Prem Krishna | Antony Sebastian

| | | |

Shereen Abuhussein |ASHIQU K HAMEED |Sham Alrashed | Seba Eskaf | Aneel Dar

Vinod EAPEN | Sunil Mathew

Address

Mannai Corporation QPSC HQ, ITS Avenue, First Floor, East Industrial Street 3
Doha
76

Opening Hours

Monday 09:00 - 17:00
Tuesday 09:00 - 17:00
Wednesday 09:00 - 17:00
Thursday 09:00 - 17:00
Sunday 09:00 - 17:00

Telephone

+97444558666

Alerts

Be the first to know and let us send you an email when Mannai CDRC posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Mannai CDRC:

Share