Q2. Which sectors are most vulnerable and why?

Ts. Mohammad Zaharudin: High-value sectors like government, finance, telco, healthcare, and manufacturing are the primary targets due to the sensitivity and value of their data. The 12,643 ransomware cases reported in 2024 (Kaspersky), a rise from 2023, highlight how attackers exploit vulnerable and compromised credentials. More than half of the campaigns we studied used stolen credentials. Identity-based attacks are now the most common entry point.

Q4. How are attackers evolving their tactics?

Ts. Mohammad Zaharudin: Attackers now leverage AI to automate and personalise attacks, like deepfake-powered phishing. We're seeing more multi-vector assaults targeting several systems at once, as well as greater exploitation of zero-day vulnerabilities.

Attackers no longer need to break in. They just log in, often with your stolen credentials. That's why multi-factor authentication ("MFA") is no longer optional; it's a basic yet critical layer of protection every organisation must have. Traditional defences aren't enough on their own. They must be supported by adaptive, real-time threat detection and response systems.

Q6. How does the collaboration between Time and CyberSecurity Malaysia enhance cyber resilience?

Ts. Mohammad Zaharudin: The collaboration focuses on:

Threat intelligence sharing

Joint policy and framework development

Coordinated incident response

Public awareness and education initiatives

These efforts align with the Malaysian Cyber Security Strategy ("MCSS") and reinforce the importance of shared responsibility between public and private sectors in securing the national digital ecosystem, especially as Malaysia prepares for more aggressive digital adoption across sectors.