LATEST NEWS   26th AECC Meeting emphasises on items requiring endorsement for subsequent submission to the ASEAN Coordinating Council (ACC) and then to the 47th ASEAN Summit - Tengku Zafrul | 12 agenda items to be discussed at the 26th ASEAN Economic Community Council (AECC) Meeting - Tengku Zafrul | ASEAN Digital Pact 2026 on fast track, 70 per cent complete - Tengku Zafrul | 2025 SPM candidates advised to inform schools or the State Education Departments if affected by natural disasters - MOE | Natural disasters: MOE will work with other government agencies to ensure management and administration of SPM 2025 examination runs smoothly | 

Firms Must Remain Vigilant To Prevent Cyberattacks

By Zarul Effendi Razali and Siti Noor Afera Abu

KUALA LUMPUR, April 25 (Bernama) -- Businesses, including brokerage firms, must regularly conduct security assessments and cybersecurity penetration testing to detect potential vulnerabilities and prevent future cyberattacks, said LGMS Bhd executive chairman Fong Choong Fook.

He stressed that organisations must consistently identify possible weaknesses in their systems, including those from applications and end-user access points.

“Businesses and brokerage firms need to change their mindset. Hackers no longer target specific industries—they will randomly attack all industries,” he said to Bernama.

LGMS is a global technology research and advisory firm, specialising in Technical Security Services (TSS) and Strategic Security Services (SSS) in cybersecurity.

Earlier in a joint statement, the Securities Commission Malaysia (SC) and Bursa Malaysia Bhd said they have received reports from a few brokers who identified failed client logins and unauthorised access or trading activities executed via limited clients’ online trading accounts.

“Capital market regulators and brokers are on alert and remain vigilant while working closely to ascertain the root cause of the incident, and to implement any further necessary measures.

“We wish to assure all investors that the integrity of Malaysia’s capital market remains intact,” the statement said.

Commenting on this, Fong has urged the SC and Bursa to review the existing cyber risk management framework at a more granular level.

Meanwhile, SPI Asset Management managing director Stephen Innes said even though the recent cyberattack affecting trading accounts on Bursa Malaysia is a serious compliance concern for brokers, from an economic standpoint, it was a non-event.

“The impact is too micro to move the macro needle, with no bearing on Malaysia’s broader economic fundamentals.

“That said, the trust equation is fragile. Retail confidence takes a hit when trading accounts are hijacked and used to pump penny stocks. If regulators act swiftly with clear disclosures, tighten broker security protocols, and freeze suspicious profits, long-term damage can be contained,” he said.

However, Innes noted that if the response is slow or opaque, reputational fallout could linger, especially in a market that is still working to attract foreign capital.

-- BERNAMA