Malaysia could be vulnerable to hybrid cyberattacks, say experts
KUALA LUMPUR: Malaysia may be able to withstand individual cyberattacks, but its ability to cope with a sustained, multi-sector assault remains uncertain, warned security experts.
KUALA LUMPUR: Security analysts have cautioned that Malaysia could face challenges in defending against coordinated, multi-faceted cyberattacks. These experts pointed to weaknesses in coordination, readiness and recovery as potential vulnerabilities. The nation's burgeoning digital economy, expanding data-center industry and geopolitical significance have made it an increasingly sought-after target, they emphasized.
Murugason R. Thangaratnam, a cybersecurity professional and adjunct professor, explained that cyber threats could encompass ransomware, data theft, espionage, and supply-chain compromises by state-sponsored actors and hacktivists. While Malaysia has a legal framework in place through the Cyber Security Act 2024 to safeguard National Critical Information Infrastructure (NCII), Thangaratnam suggested that preparedness has been inconsistent.
Former CyberSecurity Malaysia chief executive officer, Datuk Dr Amirudin Abdul Wahab, highlighted that while Malaysia has laid a solid foundation with the National Cyber Security Agency, the NCII framework and the National Cyber Crisis Management Plan, possessing legislation, institutions and security technologies does not automatically ensure operational preparedness.
He warned that a disruption in one sector, such as banking's reliance on telecommunications, telecommunications' dependence on power, and government services' reliance on cloud and network infrastructure, could trigger a chain reaction, compromising other sectors as well.
Dr Mohamed Anwer Yusoff, a cybersecurity professional, pointed to recent incidents that underscored vulnerabilities in connected infrastructure, technology vendors, and supply chains. These include the cyberattack at Tanjung Pelepas Port in September, which briefly halted terminal operations; the cyberattack on Tabung Haji, which temporarily halted services last month; and the reported compromise of public LED display screens in Kluang, Johor, in recent days.
Yusoff suggested that national preparedness should be gauged by the ability to swiftly detect intrusions, contain damage, maintain essential services, and restore operations within acceptable timeframes.
Written by urgent.news from New Straits Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.