Search
In today's digital age, the healthcare industry is increasingly reliant on electronic data, making it a prime target for cyberattacks. Understanding the potential financial ramifications of data breaches is crucial for healthcare organizations, especially in Malaysia, where specific data is limited but the risks are substantial.
A newly disclosed zero-day vulnerability in Windows shortcut files (.lnk) has been exploited in-the-wild for several years by state-sponsored hacking groups. Identified as ZDI-CAN-25373, the flaw allows attackers to silently execute malicious commands using shortcut files—making it difficult to detect through traditional security tools.
Security researchers revealed that this vulnerability has been abused since at least 2017 by advanced persistent threat (APT) groups linked to 11 different countries.
The healthcare sector in Malaysia is rapidly digitizing, driven by government initiatives, private sector investments, and the increasing demand for efficient patient care. With this transformation comes a growing reliance on third-party vendors for software, cloud storage, medical devices, and IT infrastructure. However, third-party relationships also introduce significant risks, including data breaches, regulatory non-compliance, and service disruptions. Healthcare IT leaders must have a robust Third-Party Risk Management (TPRM) strategy to safeguard sensitive patient data and ensure seamless operations.
The misuse of technology, including cyber threats and digital fraud, has the potential to create an entirely new form of corruption, warned Malaysian Anti-Corruption Commission (MACC) chief commissioner Tan Sri Azam Baki.
In an effort to clamp down on personal data leaks, Malaysia's Digital Ministry is rolling out its first-ever intelligence system to track and monitor the online sale of personal data. Dubbed the "Threat Intelligence Capacity Support Automation for Personal Data Breach Case Management Project", the initiative—led by the Personal Data Protection (PDP) Commissioner—is set to launch in Q2 this year. (Yes, the name is a mouthful, but at least it sounds impressive enough to scare off data thieves.)
