Blog
Why organisations get breached — and how to see it coming
Practical insights from the team behind Fusion XDR on security monitoring, dark-web exposure, attack surfaces and Malaysia's Cyber Security Act 2024.
THREAT ADVISORY
Freezers set to 50°C, tax portals offline: what the global cyberattacks mean for Malaysia
Attacks abroad have reached supermarket freezers, tax portals and population registers. NACSA has raised Malaysia's threat level to Medium. Here is what to do this week.
NEWS
AI MSP 365 launches Fusion XDR at Cradle Live
Officiated by the Minister of Science, Technology and Innovation: sovereign AI security that sees the whole attack and stops it in minutes, built and run in Malaysia.
DARK-WEB MONITORING
More than 1,000 leaked accounts their pen test never saw: why dark-web monitoring matters
A regulated body found more than 1,000 of its 40,000 member accounts on the dark web. None appeared in its pen test report. Here's why — and what to do about it.
EXPOSURE MANAGEMENT
You can't protect what you can't see: why exposure management matters
43 subdomains, 37 open host-port pairs and an exposed admin port — from one external scan. Why your attack surface is bigger than you think, and how to manage it.
SECURITY MONITORING
They had every tool — and still lost. Why your organisation needs security monitoring
Best-in-class tools, annual pen tests and a DR centre didn't stop a destructive ransomware attack. Here's what was missing — and what a SOC actually does.
Case study · 2023 · Regulated organisation in Malaysia (anonymised)
They had everything — and still lost.
THEY HAD
- Best-in-class security tools
- Annual penetration tests
- A disaster recovery centre
- Annual BCP / DR drills
THEY LOST
- Systems encrypted
- DR site destroyed
- Backups deleted
- More than three months to recover
- Losses in the millions of ringgit
Why? No single tool saw the full attack.
Reference case · Regulated body (anonymised)
None of them appeared in the annual penetration test report — it was never designed to look.
Why dark-web monitoring matters →What changes with Fusion XDR
- Endpoint, server, network and web activity correlated into one attack story
- Leaked credentials and exposed systems flagged before attackers use them
- Automated containment in minutes, not after the damage is done
- Evidence and timelines ready for management and regulators
Case studies are anonymised to protect confidentiality. Identifying details such as names, dates and sectors are withheld or generalised, figures are rounded, and the accounts are shared for awareness only — they do not describe the current security of any organisation.
See the whole attack in your own environment.
Book a 30-minute demo with a Fusion XDR specialist. We'll walk through your threat landscape and show how the platform fits — on-premise or managed.