# FIRMUS ## Posts - [Why Effective and Professional Incident Response Services Matter in 2026](https://firmussec.com/why-effective-and-professional-incident-response-services-matter-in-2026/): AI is advancing rapidly, and millions are using it daily. But with this rise comes a growing concern many do not see coming: Shadow AI. - [Why Every Business Needs Professional Penetration Testing in 2026](https://firmussec.com/why-every-business-needs-professional-penetration-testing-in-2026/): AI is advancing rapidly, and millions are using it daily. But with this rise comes a growing concern many do not see coming: Shadow AI. - [Beyond the Vulnerability Scan: The Business Value of Red Teaming](https://firmussec.com/beyond-the-vulnerability-scan-the-business-value-of-red-teaming/): AI is advancing rapidly, and millions are using it daily. But with this rise comes a growing concern many do not see coming: Shadow AI. - [Compromise Assessment: Proactively Hunting for Hidden Threats in Your Network](https://firmussec.com/compromise-assessment-proactively-hunting-for-hidden-threats-in-your-network/): AI is advancing rapidly, and millions are using it daily. But with this rise comes a growing concern many do not see coming: Shadow AI. - [Shadow AI: The Hidden Side of AI at Work](https://firmussec.com/shadow-ai-the-hidden-side-of-ai-at-work/): AI is advancing rapidly, and millions are using it daily. But with this rise comes a growing concern many do not see coming: Shadow AI. - [Vulnerability Management & Assessment: How Often Is Enough?](https://firmussec.com/vulnerability-management-assessment-how-often-is-enough/): In today’s evolving cybersecurity landscape, vulnerability management (VM) and vulnerability assessment (VA) are critical components of a robust security strategy. These processes should not be treated as one-time events but rather as continuous efforts to ensure an organization remains protected against emerging threats. - [Why Businesses Are Shifting from Traditional Antivirus to Managed EDR](https://firmussec.com/why-businesses-are-shifting-from-traditional-antivirus-to-managed-edr/): As cyberattacks become more advanced and harder to detect, traditional antivirus (AV) software is no longer enough to keep businesses secure. Organisations are increasingly turning to a more modern, proactive solution: Managed Endpoint Detection and Response (EDR). This shift marks a significant evolution in how companies approach cybersecurity. - [Attackers School Day: Cyberattacks on the Education Industry](https://firmussec.com/attackers-school-day-cyberattacks-on-the-education-industry/): In today’s knowledge economy, the education industry plays a vital role in societal and economic growth. With this, the education industry has become a pot of gold for attackers given that the industry is filled with valuable data. - [Proactive Security with MDR: Stopping Threats Before They Strike](https://firmussec.com/proactive-security-with-mdr-stopping-threats-before-they-strike/): Cyber threats are becoming more sophisticated, targeting organizations before they even realize they’re at risk. A reactive approach is no longer enough—businesses need a security strategy that anticipates and neutralizes threats before they escalate. - [The Rising Threat: Cyber Attacks Targeting Healthcare Sector](https://firmussec.com/the-rising-threat-cyber-attacks-targeting-healthcare-sector/): Healthcare plays a vital role in society, safeguarding both individual well-being and public health. The sector's wealth of sensitive patient data, essential medical operations, and significant financial resources make it a cornerstone of societal stability, which in turn draws attention from those seeking to exploit its value, such as cyber attackers. - [Bridging Security Gaps with A Proactive and Comprehensive Approach](https://firmussec.com/bridging-security-gaps-with-a-proactive-continuous-and-comprehensive-approach/): Traditional security testing methods, like Vulnerability Assessment and Penetration Testing (VAPT), offer valuable insights but only provide a snapshot in time. Security gaps can emerge between assessments, leaving organizations exposed. This is where Breach and Attack Simulation (BAS) as a service comes into play. - [Active Directory Security: Fortifying the Heart of Your IT Infrastructure](https://firmussec.com/active-directory-security-fortifying-the-heart-of-your-it-infrastructure/): Serving as the backbone of authentication, access control, and resource management, AD is essential for operational continuity and a prime target for cybercriminals. Strengthening AD security now is not just a technical necessity but a strategic move to safeguard your business in the year ahead. - [FIRMUS Joins TechMatrix Corp, Strengthening Cybersecurity and Expanding ASEAN Reach](https://firmussec.com/firmus-joins-techmatrix-corp-strengthening-cybersecurity-and-expanding-asean-reach/): FIRMUS has announced its acquisition by TechMatrix Corp (TSE:3762), a leading technology solutions provider based in Japan. This strategic acquisition represents a significant milestone in the evolution of FIRMUS, positioning the company to further enhance its cybersecurity offerings and expand its reach across the ASEAN region. - [Building Cybersecurity Confidence via Continuous Validation](https://firmussec.com/building-cybersecurity-confidence-via-continuous-validation/): In today’s digital world, cybersecurity is not just important—it’s essential. Every organization relies on security controls like firewalls, SIEMs, and EDR tools to protect against cyber threats. These tools are the frontline defense, but here’s the challenge: how can you be sure they’re working as they should?  - [CrowdStrike, Ransomware Prevention and Best Practices: A BFM Enterprise Explores Appearance with Datuk Alan See](https://firmussec.com/crowdstrike-ransomware-prevention-and-best-practices-a-bfm-enterprise-explores-appearance-with-datuk-alan-see/): In a recent interview on BFM, our CEO, Datuk Alan See delved into the topic of battling and preventing ransomware as well as the recent CrowdStrike outage. - [The Importance of Security Measures and Posture in Today’s World](https://firmussec.com/the-importance-of-security-measures-and-posture-in-todays-world/): Technology has made significant leaps and organisations of all sizes today must prioritize their security posture to protect sensitive information from cyber-attacks, from modern EDR tools to a proper Incident Response plan - [FIRMUS Advisory: Royal Ransomware](https://firmussec.com/firmus-advisory-royal-ransomware/): Started to emerge in early 2022, the Royal ransomware is still active and currently impacting organizations across the globe, including the South East Asia region. Our advisory provides an in-depth analysis of technical details, detection methods, IOCs, Royal Ransomware's hashes and its associated files. - [FIRMUS Signs MOU with Site Preparation Management Co., Ltd. (SITEM) at DEX Connex to Offer Cybersecurity Services and Solutions in Thailand](https://firmussec.com/firmus-sitem-mou-dexconnex/): FIRMUS Signs MoU with Site Preparation Management Co., Ltd. (SITEM) at DEX Connex to Offer Cybersecurity Technical Assessments, Consultancies, and Solutions in Thailand - [FIRMUS Awarded the ASOCIO Cybersecurity Award at ASOCIO Digital Summit 2023](https://firmussec.com/firmus-awarded-the-asocio-cybersecurity-award/): The celebration streak continues at FIRMUS as we are awarded the ASOCIO Cybersecurity Award  at the ASOCIO Digital Summit 2023, adding another prestigious accolade to our collection. - [FIRMUS Bags the HRDC Award for SME Employer Category at HRD Awards 2023](https://firmussec.com/firmus-bags-the-hrdc-award-for-sme-employer-category-at-hrd-awards-2023/): We are incredibly honored to receive the prestigious HRDC Award (SME Employer Category) at the HRD Awards 2023. This award is a testament to the dedication of the FIRMUS team in nurturing and upholding a positive corporate culture since our inception 15-years ago. Our commitment to our core values of Trust, Reliability, and Care, remains strong. - [Executive Luncheon | Cybersecurity Starts at the Board: Closing the Cyber Gap through Risk Protocols](https://firmussec.com/executive-luncheon-cybersecurity-starts-at-the-board-closing-the-cyber-gap-through-risk-protocols/): What a great turnout at our recent executive luncheon, "Cybersecurity Starts at the Board: Closing the Cyber Gap through Risk Protocols," at The St. Regis Kuala Lumpur in collaboration with Bitsight. During the event, we engaged in dynamic discussions with attendees, exploring the most effective strategies to empower organizations to make strategic decisions that not only reduce exposure and enhance performance but also minimise risks - [Forward as ONE: Achieving Sustainable High Growth](https://firmussec.com/forward-as-one-achieving-sustainable-high-growth/): Two days, one night of unforgettable experiences at Paradise Valley and Melaka with the FIRMUS team! 🌄🌆 This incredible team-building event wouldn't have been possible without the active participation and enthusiasm of everyone from both FIRMUS MY and FIRMUS SG. - [FIRMUS Advisory: MOVEit Ransomware](https://firmussec.com/firmus-advisory-moveit-ransomware/): The MOVEit ransomware was making headlines everywhere worldwide, and since now it has passed, it's crucial for everyone to raise awareness and protect against similar types of threats in the future. Our advisory provides an in-depth analysis of technical details, detection methods, IOCs, and the CLOP ransomware group's TTPs involved in MOVEit attacks. - [FIRMUS Emerges Among the First Few Companies in Malaysia in Securing ISO27001:2022 Certification.](https://firmussec.com/firmus-emerges-among-the-first-few-companies-in-malaysia-in-securing-iso270012022-certification/): FIRMUS, an industry leader in cybersecurity services and solutions, has achieved a remarkable feat by becoming the first few companies in Malaysia to attain the prestigious ISO27001:2022 certification, setting a new industry standard. This monumental achievement, accomplished in record time, highlights the unwavering commitment and dedication of the FIRMUS team, whose relentless efforts made this milestone possible. - [Why Consolidation of Managed Cybersecurity Service Providers (MSSP) is Inevitable – Through the Lens of an MSSP](https://firmussec.com/why-consolidation-of-managed-cybersecurity-service-providers-mssp-is-inevitable-through-the-lens-of-an-mssp/): With the rise in popularity and importance of cybersecurity monitoring, it paved the way for many local and foreign Managed Cybersecurity Service Providers (MSSP) like SysArmy, Bluesify, Ensign InfoSecurity, DXC, and BlueVoyant; where organisations outsourced their monitoring and management of security devices and systems. Like the US banking industry years ago, this is the dawn of “MSSP Consolidation”; amidst increasing demand for high-quality MSSP as well as tougher competition - [Early Warning Alert: ASUS Router Critical Vulnerabilities](https://firmussec.com/asus-router-critical-vulnerabilities/): ASUS has published updated firmware with cumulative security updates that address vulnerabilities in several router models, advising customers to update their devices immediately or restrict WAN access until they are secure. According to the organisation, the newly released firmware fixes nine security flaws, including a high and critical one. - [Cyber Threat Alert: MOVEit Transfer Vulnerability Exploited (CVE- 2023-34362)](https://firmussec.com/cyber-threat-alert-moveit-transfer-vulnerability-exploited-cve-2023-34362/): MOVEit, a well-known secure file transfer program, is at the center of a high-profile breach known as "Zero-Day MOVEit Transfer Vulnerability" that was recently revealed. This possible flaw might result in elevated privileges and unauthorided access to the environments. The attacking approach is a SQL Injection onto unpatched MOVEit servers, which allows the threat actor to gain access and remotely execute arbitrary code. As a result, it is critical to patch the flaw with the most recent security patches released by Progress Software in order to prevent exploitation efforts. - [PIKOM CIO Chapter Cybersecurity Conference 2023](https://firmussec.com/pikom-cio-chapter-cybersecurity-conference-2023/): The PIKOM CIO Chapter Cybersecurity Conference 2023 was held in style in Bangkok! As we bid farewell to the event, we would like to express our deepest gratitude to all the amazing individuals who attended the conference. Your enthusiastic participation and active engagement truly made this event an unforgettable 3-day, 2-night learning experience. - [The Challenges for Managed Security Service Providers (MSSP) in Malaysia](https://firmussec.com/the-challenges-for-managed-security-service-providers-mssp-in-malaysia/): Malaysia is a rapidly growing economy with a high rate of technology adoption. As more businesses digitize their operations, cybersecurity risks have also increased tremendously. Managed cybersecurity service providers (MSSPs) have emerged as a solution for businesses that lack the expertise or resources to manage their own cybersecurity. However, MSSPs in Malaysia face several challenges and shortcomings that can impact their ability to provide effective cybersecurity services to their clients. - [Planning Your XDR Journey](https://firmussec.com/planning-your-xdr-journey/): Extended Detection and Response (XDR) is the latest buzzword in the cybersecurity industry. The idea behind XDR is to provide organizations with a comprehensive view of their security landscape, by integrating data from multiple sources, and delivering faster and more accurate threat detection and response. XDR is a powerful technology that can significantly improve an organization's security posture, but it requires careful planning and execution. - [FIRMUS recognized as one of the finalist for the National Cybersecurity Innovation Challenge Award!](https://firmussec.com/firmus-recognized-as-one-of-the-finalist-for-the-national-cybersecurity-innovation-challenge-award/): We are incredibly honoured to have been recognised by Malaysian National Security Council (MKN), Malaysia Digital Economy Corporation (MDEC) and National Cybersecurity Agency Malaysia (NACSA) as one of the finalists for the National Cybersecurity Innovation Challenge Award! - [Hari Raya Open House: A Cultural Feast and Community Celebration](https://firmussec.com/hari-raya-open-house-a-cultural-feast-and-community-celebration/): Nothing beats the joy of seeing our customers, partners, and friends come together for the FIRMUS Raya Open House: A Cultural Feast and Community Celebration! We were thrilled to see everyone catching up over delicious food and embracing the Raya spirit as one big community. - [FIRMUS featured at BFM: Why You Shouldn't Use Public Wifi Networks](https://firmussec.com/firmus-featured-at-bfm-why-you-shouldnt-use-public-wifi-networks/): Excited to have our CEO, Datuk Alan See to share his opinion on why you shouldn't use public Wi-Fi networks when working remotely in a recent interview with BFM 89.9. As more companies shift towards remote or hybrid work models, ensuring a strong cybersecurity posture is crucial to protecting sensitive information from cyber threats - [Dinner and Drinks | Sake Sunset: An Evening of Networking and Learning with SentinelOne and Mimecast](https://firmussec.com/dinner-and-drinks-sake-sunset-an-evening-of-networking-and-learning-with-sentinelone-and-mimecast/): At our recent event in collaboration with SentinelOne and Mimecast, attendees had the opportunity to learn from Thiban Darmalingam and Melissa Lim on how the integration between two companies accelerates incident response capabilities across all security layers, including email, endpoints, and cloud. - [Supply Chains: The New Frontier for Cyber Attacks and How to Protect Your Business](https://firmussec.com/supply-chains-the-new-frontier-for-cyber-attacks-and-how-to-protect-your-business/): The growing threat of cyber-attacks has made businesses of all sizes vulnerable in today's digital landscape. However, supply chains have emerged as a new frontier for cyber criminals. By taking proactive steps to protect businesses and their customers, organizations can better safeguard their supply chains and mitigate the impact of cyber-attacks. - [Tech Workshop | Live Segmentation Protection Experience: Ransomware Containment with Zero-Trust Segmentation](https://firmussec.com/tech-workshop-live-segmentation-protection-experience-ransomware-containment-with-zero-trust-segmentation/): Tech Workshop | Today, we hosted "Live Segmentation Protection Experience: Ransomware Containment with Zero-Trust Segmentation.", as a sequel to our previous event with Illumio! During the event, attendees had the opportunity to gain hands-on experience on how Illumio realizes zero-trust segmentation. - [Sales Ethics in Cybersecurity: Trust and Integrity as the Guiding Principles in What We Do](https://firmussec.com/sales-ethics-in-cybersecurity-trust-and-integrity-as-the-guiding-principles-in-what-we-do/): With the importance and size of the cybersecurity industry growing every day, it is a race for companies to grab market shares in order to achieve revenue goal as well as reaching the ever-glorious “market leader” status, more so in an event of a potential economic slowdown to secure the opportunities available. Unfortunately, some companies have taken advantage of this situation by using deceptive sales tactics. While these tactics may be effective in the short-term, they are not ethical and can lead to reputational damage. - [SEGi & FIRMUS Join Forces To Produce Industry Talents](https://firmussec.com/segi-firmus-join-forces-to-produce-industry-talents/): Malaysia's largest higher education provider, SEGi University & Colleges and leading cybersecurity solution provider, Firmus Sdn Bhd, recently sealed a Memorandum of Understanding (MoU), to pave the way for the collaboration of producing graduates to meet the increasing demand of the cybersecurity industry. - [Double The Celebration, Double The Pride! FIRMUS Takes Home Two Awards at the Illumio and AZ Asia-Pacific Partner Event](https://firmussec.com/double-the-celebration-double-the-pride-firmus-takes-home-two-awards-at-the-illumio-and-az-asia-pacific-partner-event/): Double the celebration, double the pride! FIRMUS took home the "2022 Disruptor of the Year Award" and the "2022 Superstar of the Year Award" at the Illumio and AZ Asia-Pacific Partner event last week, received by Datuk Alan See and Choon Seng Lim. - [Eliminate Cyber Disaster through Zero Trust Segmentation](https://firmussec.com/eliminate-cyber-disaster-through-zero-trust-segmentation/): With everything being more interconnected to the internet today. It represents a significant challenge for cybersecurity leaders and teams as digital transformation is dramatically expanding the attack surface and cyberattacks are more pervasive than ever. - [Breach and Attack Simulation (BAS) and Vulnerability Assessment and Penetration Testing (VAPT). Which one do I need?](https://firmussec.com/breach-and-attack-simulation-bas-and-vulnerability-assessment-and-penetration-testing-vapt-which-one-do-i-need/): BAS and VAPT are two commonly used methods for testing the security of a computer system, network, or web application. Both approaches involve identifying and analysing vulnerabilities in the system in order to assess its defences against potential attacks, but there is some debate about which approach is more effective. - [Leaping in兔(tù) A Prosperous Year!](https://firmussec.com/leaping-in%e5%85%94tu-a-prosperous-year/): It’s a wrap for the FIRMUS CNY 2023 celebration! We were delighted to celebrate this special occasion with our cherished clients, and it was a pleasure to see such great support from everyone. - [An Approach to Effective Implementation of Data Leakage Prevention (DLP)](https://firmussec.com/an-approach-to-effective-implementation-of-data-leakage-prevention-dlp/): Losing important data can have serious consequences, including financial losses, legal issues, and damage to a company’s reputation. Therefore, it is essential to have proper governance and measures in place to mitigate the risks of data loss and ensure that valuable information is being safeguarded while being available to the authorised people. - [Power Up Incident Response With FIRMUS & CrowdStrike](https://firmussec.com/power-up-incident-response-with-firmus-crowdstrikes/): FIRMUS, Malaysia’s leading cybersecurity services provider, has announced today that it has met CrowdStrike’s Engagement Licensing Program (ELP) partner requirements. The ELP program is an exclusive CrowdStrike program for partner professional services personnel, who are trained and certified to leverage the CrowdStrike Falcon platform as part of their service delivery. - [FIRMUS & Picus Security: Automated Cyber Security Posture Validation in Malaysia & Singapore](https://firmussec.com/firmus-picus-security-automated-cyber-security-posture-validation-in-malaysia-singapore/): FIRMUS is proud to announce a partnership with Picus Security, the Pioneer of Breach and Attack Simulation, enabling FIRMUS’ clients to be able to have a more holistic view of their security posture that enables consistent and continuous improvement of their security systems. - [FIRMUS Wins the “Best Privileged Access Management Win” Award at CyberArk Partner Identity Refresh 2022!](https://firmussec.com/firmus-wins-the-best-privileged-access-management-win-award-at-cyberark-partner-identity-refresh-2022/): We are delighted to receive CyberArk’s “Best Privileged Access Management (PAM) Win” award today at the CyberArk Partner Identity Refresh 2022! This recognizes our successful and long-term partnership with CyberArk in providing comprehensive identity security solutions to our clients. - [Breach and Attack Simulation: How Do You Know Your Cybersecurity Investments Are Worth It?](https://firmussec.com/breach-and-attack-simulation-how-do-you-know-your-cybersecurity-investments-are-worth-it/): Executive Luncheon | The spending of cybersecurity solutions to defend against these attacks has increased along with the global trend toward more frequent cyberattacks. But after every purchase is made, we always have one question in our minds: “Are we protected?” - [Introducing FIRMUS Incident Response (IR)!](https://firmussec.com/introducing-firmus-incident-response-ir/): Introducing FIRMUS Incident Response (IR) where we provide our IR services to compromised customers through our experts that will provide prompt support towards containment, ensuring no further damage is done and the business can resume as usual with minimal impact. - [Introducing the first FIRMUS Corporate Video!](https://firmussec.com/introducing-the-first-firmus-corporate-video/): This year marks a special year for FIRMUS. Firstly. our team has grown by leaps and bounds; we moved to a new office at Hampshire Place; and it has been a great growth year for us! - [Can Attackers Use Cutting-edge Threat Against OT?](https://firmussec.com/can-attackers-use-cutting-edge-threat-against-ot/): Operational technology systems are critical to the functioning of many industries and organizations. However, these systems are often vulnerable to cyberattacks that can cause significant harm. - [Optus Cyber Security Breach In September 2022](https://firmussec.com/optus-cyber-security-breach-in-september-2022/): In September 2022, the Australian telecommunications company Optus suffered a major cyber security breach. The attack affected over two million customers and resulted in the loss of personal data, including names, addresses, dates of birth, genders, and contact details. The incident also exposed credit card numbers and other financial information. - [Cybersecurity in Malaysia: Current and Looking Beyond 2022](https://firmussec.com/cybersecurity-in-malaysia-current-and-looking-beyond-2022/): Cyber-attacks at any scale will always leave a significant impact, whether it is monetary losses, personal data leaks or both. In 2016, the cost of cybercrime to Malaysia was estimated at RM1.25 billion. - [Penetration Testing FAQ](https://firmussec.com/penetration-testing-faq/): How often should I run a penetration testing exercise in my organization? - [A Greater Visibility: Enhancing XDR with AD Protection](https://firmussec.com/a-greater-visibility-enhancing-xdr-with-ad-protection/): Executive Luncheon | Identity Threat Detection and Response (ITDR), together with XDR, increases the capability and efficiency of organisations’ ability to defend themselves against threats and provides cyber defenders with better clarity of suspicious activities on a single console. - [Adopting a Next-Gen Data Protection strategy in Today’s Hybrid Working Environment Event 2022](https://firmussec.com/adopting-a-next-gen-data-protection-strategy-in-todays-hybrid-working-environment-event-2022/): Executive Luncheon | Adopting a Next-Gen Data Protection strategy in Today’s Hybrid Working Environment at Sofitel KL Damansara. The rapid shift from workplace to remote workforce security was a triumph for business continuity but it also opened the door to new cyber threats and data security risks.  Visibility and control of your data movement and protecting your data has become even more important. - [How Fintechs Can Securely Disrupt The Market Event 2022](https://firmussec.com/how-fintechs-can-securely-disrupt-the-market-event-2022/): Seminar Dinner | The financial services sector is a high-value target for cyberattacks and highly regulated by jurisdictions around the world. Facing constant intrusion attempts and other attacks, IT solutions for financial services often find it difficult to move from a reactive cybersecurity stance to a proactive one. - [When Fostering a Positive Office Culture is Important](https://firmussec.com/when-fostering-a-positive-office-culture-is-important/): It’s no secret that office culture can have a big impact on employee morale. The values and norms that are promoted within an office can influence the way employees behave and make decisions. - [What is Penetration Testing](https://firmussec.com/what-is-penetration-testing/): A penetration test, also known as a pen test, is an authorized simulated attack on a computer system or network to evaluate the security of the system. The purpose of a penetration test is to identify vulnerabilities that could be exploited by attackers. Penetration tests are typically performed by ethical hackers, also known as white hat hackers. - [FIRMUS-PCC Conference – Industry stalwarts voice out cybersecurity hopes and concerns](https://firmussec.com/firmus-pcc-conference-industry-stalwarts-voice-out-cybersecurity-hopes-and-concerns/): During the conference, Enterprise IT News captured key insights from cybersecurity and technology leaders about the cybersecurity landscape, as well as their expectation of the cybersecurity conference. - [FIRMUS-PCC Cybersecurity Conference 2022](https://firmussec.com/firmus-pcc-cybersecurity-conference-2022/): An honor to be featured on Enterprise IT News. It was exciting to see over 100 cybersecurity and technology leaders and advocates united under one roof to re-charge, relearn and reconnect together. we hope everyone enjoyed the event as much as we did! - [CTM360® and FIRMUS™ ink Partnership to Enhance Digital Risk Protection in Malaysia & Singapore](https://firmussec.com/ctm360-and-firmus-ink-partnership-to-enhance-digital-risk-protection-in-malaysia-singapore/): FIRMUS™ partners with CTM360® – a global Digital Risk Protection Platform – to enable businesses to identify vulnerabilities and to detect, manage and respond to threats in the Surface, Deep & Dark web. - [FIRMUS™ and Vectra Partnership: AI-Powered Cybersecurity for Malaysian Enterprises](https://firmussec.com/firmus-and-vectra-partnership-ai-powered-cybersecurity-for-malaysian-enterprises/): FIRMUS™, a leading, award winning regional Cyber Security Consulting company, and Vectra, the leader in AI-powered network detection and response, today announced a partnership that enables FIRMUS™’ commercial, public sector and service provider customers to detect attackers in real time and perform conclusive incident investigations. - [An Insight Into Conti Ransomware](https://firmussec.com/an-insight-into-conti-ransomware/): All of us were shaken by the news when Bank Indonesia (BI), the central bank of the Republic of Indonesia was attacked by ransomware called CONTI. The attackers claimed to have stolen 13.88GB worth of files and this caused their non-critical data leaked in the dark web. However, the bank claims that the bank’s operational activities and public economic services are not disrupted and they managed to mitigate it before impacting the public services. So, what is this malware and how does it work? - [FIRMUS is the 2021 Malaysian Cyber Security Company of the Year](https://firmussec.com/firmus-is-the-2021-malaysian-cyber-security-company-of-the-year/): FIRMUS Sdn Bhd (FIRMUS), Malaysia’s leading cyber security service and consultancy company, has once again been recognised as the Cyber Security Company of the Year at the 12th Cyber Security Malaysia – Awards, Conference & Exhibition (CSM-ACE). - [Facebook Data Leak Advisory](https://firmussec.com/facebook-data-leak-advisory/): 533 million individuals, diversely ranging from 106 countries, have had their details publicized on a popular hacking forum which intensely mirrors the extensive amounts of data managed and collected by Facebook, as well as the ponderous responsibility and uncertainty it carries. - [Purple Fox Malware Advisory & Fixes](https://firmussec.com/purple-fox-malware-advisory-fixes/): The renowned Purple Fox malware has resurfaced with worm capacities, undertaking one Windows machine after another. In this article, we will give a brief explanation of what is it all about and how to mitigate the issue and not falling prey to this attack! - [DEARCRY Ransomware Advisory & Fixes](https://firmussec.com/dearcry-ransomware-advisory-fixes/): For more than two months, a newly patched series of vulnerabilities in on-premises versions of Microsoft Exchange Server has been successfully exploited. The hack, which was first linked to a Chinese state-sponsored actor, has since been used in a variety of cybercrime schemes, the most recent of which is the DearCry ransomware. In this article, we will give a brief explanation of what is it all about and how to detect and mitigate the issue. - [FIRMUS – SecureKi Evening Forum](https://firmussec.com/firmus-secureki-evening-forum/): Privileged Access Management (PAM) tools offer significant security and compliance benefits that can be used to build a business case. Besides the intangible benefits, there are also measurable benefits that can help you justify the investment in a privileged access management solution. Let’s take a deeper dive into the many ways PAM technology can deliver value to your organization and help you demonstrate return on security investment (ROSI) to your business stakeholders. - [Breakfast Talk Invitation: Train Your Teams Against Cyber Attack Threats](https://firmussec.com/breakfast-talk-invitation-train-your-teams-against-cyber-attack-threats/) - [Secure Your Journey to Cloud with McAfee Nanosec](https://firmussec.com/secure-your-journey-to-cloud-with-mcafee-nanosec/): NanoSec wrapper works as an agent and runs on any flavour of Linux and many flavours of Windows OS. NanoSec also provides an agentless Container scanning and Config Audit (including CIS Benchmarks). The NanoSec Intelligent backend can be hosted by the customer on any midsize server on premise/ cloud or as a SaaS service. - [FIRMUS I PIKOM CIO CHAPTER 8th Cyber Security Conference 2019](https://firmussec.com/firmus-i-pikom-cio-chapter-8th-cyber-security-conference-2019/): This is the third year where Pikom CIO Chapter (PCC) is in support of FIRMUS’ Cyber Security Conference. This year, the FIRMUS I PCC 8th Cyber Security Conference 2019 was held on the 1-3 August 2019 in Pullman Hotel, Hanoi, Vietnam. The conference offers 1-full day of educational training / briefing from experienced security experts. The theme for this conference is “Insights Into Your Most Pressing Priorities For Cyber Security Spending”. - [CrowdStrike Cyber Security Briefing and Dinner](https://firmussec.com/crowdstrike-cyber-security-briefing-and-dinner/): Jointly hosted by CrowdStrike and FIRMUS, this session is an opportunity for you to discuss and learn how to stop breaches by preventing and responding to these and other cyber threats that existing security tools simply cannot stop. The session will end with a networking dinner. - [CityPlusFM Interview: Cybersecurity Trend and Challenges for Malaysia](https://firmussec.com/cityplusfm-interview-cybersecurity-trend-and-challenges-for-malaysia/): Our CEO, Alan See has been interviewed by the First Chinese Business FM, CityPlus FM on topic regarding Cyber security trends and the challenges faced by Malaysian organization. - [FIRMUS Receives CREST Accreditation From UK](https://firmussec.com/firmus-receives-crest-accreditation-from-uk/): FIRMUS Sdn Bhd, Malaysia’s leading cyber security service and consultancy company, has been accepted by CREST (International) to be an accredited member for the provision of Penetration Testing Services. - [FIRMUS 6th CIO Cyber Security Conference: PIKOM Extends Support To Knowledge-Sharing Event](https://firmussec.com/firmus-6th-cio-cyber-security-conference-pikom-extends-support-to-knowledge-sharing-event/): FIRMUS Sdn Bhd (FIRMUS) recently organised their biggest ever annual cybersecurity event overseas. The 6th FIRMUS CIO Cyber Security Conference 2017, that ran from 3rd August till 5th August in Bandung, Indonesia, was a collaborative effort with our national ICT association or PIKOM’s CIO Chapter (PCC), and saw an attendance from chief information officers (CIOs), or IT heads, and sponsors, totalling nearly 70. - [BFM: Alan See, CEO of FIRMUS Talks About Happenings in the Cyber Security Space and Policies](https://firmussec.com/bfm-alan-see-ceo-of-firmus-talks-about-happenings-in-the-cyber-security-space-and-policies/): BFM 89.9 Malaysia speak to Alan See, Co-Founder and CEO of FIRMUS to talk about happenings in the cyber security space and policies. The year 2016 has seen numerous security breaches and has affected thousands of businesses costing millions of dollars. So what is going on and what can be done? - [Alan See, FIRMUS CEO, Featured In PIN 品 Prestige Magazine](https://firmussec.com/alan-see-firmus-ceo-featured-in-pin-%e5%93%81-prestige-magazine/): Alan See, CEO of Cirmus, appeared in an exclusive interview on PIN 品 Prestige Magazine (December 2016 Issue). During the interview, Alan shed light on FIRMUS’ strategy for success, its brand product innovations, as well as on the talented people running the business. - [Cyber Security Malaysia Honors Industry’s Best with 2016 Awards](https://firmussec.com/cyber-security-malaysia-honors-industrys-best-with-2016-awards/): We have just recently been named, Malaysia’s 2016 ‘Cyber Security Company of the Year’. While attaining significant growth in market presence, revenue, we have never failed to continuously introduce innovation in services and solutions in IT Security and never compromised on the quality of services to our clients. ## Pages - [FIRMUS Privacy Policy](https://firmussec.com/firmus-privacy-policy/): Privacy Policy  The Firmus Privacy Policy outlines how user information is collected, used, retained, disclosed, and disposed, with consent obtained before engagement with us.  By using our products and services or accessing our website, you acknowledge and consent to the collection, use, retention, disclosure and disposal of your information as outlined in this Privacy Policy.  As a leading provider of penetration testing and cybersecurity strategy solutions, we collect and process personal data to deliver secure, reliable, and effective services tailored to your organization’s needs.  With the consent taken, we ensure our visitors/clients on the secure safekeeping of the data and - [Cybersecurity Gap Assessment – Identify & Fix Security Gaps](https://firmussec.com/cybersecurity-gap-assessment/) - [PAM (Privileged Access Management): Why It’s Essential for Cybersecurity](https://firmussec.com/pam-privileged-access-management/) - [AD Security](https://firmussec.com/solutions/ad-security/) - [EDR Solution](https://firmussec.com/solutions/edr-solution/) - [AD Assessment](https://firmussec.com/our-services/ad-assessment/) - [Digital Forensics and Incident Response Services (DFIR)](https://firmussec.com/our-services/assessment/digital-forensics-and-incident-response/) - [Careers](https://firmussec.com/careers-at-firmus/) - [Our Partners](https://firmussec.com/solutions/our-partners/) - [Exposure & Digital Risk Management (EMS)](https://firmussec.com/centurion/exposure-digital-risk-management/) - [Vulnerability Management (VMS)](https://firmussec.com/centurion/vulnerability-management/) - [Managed Detection and Response (MDR)](https://firmussec.com/centurion/mdr/) - [Centurion Managed Services](https://firmussec.com/centurion/) - [Cryptography & Key Management Advisory](https://firmussec.com/our-services/assurance/cryptography-key-management-advisory/) - [Active Directory (AD) Assessment](https://firmussec.com/our-services/assessment/ad-assessment/) - [Links](https://firmussec.com/links/): 10th PIKOM CIO Chapter Cyber Security Conference 2023 - [Region](https://firmussec.com/region/) - [Managed CISO Office Service](https://firmussec.com/our-services/managed-services/managed-ciso-office-service/) - [Endpoint Recovery Services (ERS)](https://firmussec.com/our-services/managed-services/endpoint-recovery-services-ers/) - [Managed Incident Response (IR) Retainer Services](https://firmussec.com/our-services/managed-services/managed-incident-response-ir-retainer-services/) - [ISMS & Compliance Advisory](https://firmussec.com/our-services/managed-services/isms-compliance-advisory/) - [Enterprise Vulnerability Services](https://firmussec.com/our-services/managed-services/enterprise-vulnerability-services/) - [Managed Privileged Access Management (PAM)](https://firmussec.com/our-services/managed-services/managed-privileged-access-management-pam/) - [Managed Breach and Attack Simulation (BAS)](https://firmussec.com/our-services/managed-services/managed-breach-attack-simulation-bas/) - [Managed Services](https://firmussec.com/our-services/managed-services/) - [Cyber Security Incident Response Services](https://firmussec.com/our-services/assessment/incident-response/) - [Cyber Security Awareness](https://firmussec.com/our-services/awareness/) - [OT Security Consulting](https://firmussec.com/our-services/operational-technology-security/ot-security-consulting/) - [OT Compliance Assessments](https://firmussec.com/our-services/operational-technology-security/ot-compliance-assessments/) - [OT Security Assessment](https://firmussec.com/our-services/operational-technology-security/ot-security-assessment/) - [Operational Technology Security](https://firmussec.com/our-services/operational-technology-security/) - [Security Policy and Framework Development](https://firmussec.com/our-services/assurance/security-policy-and-framework-development/) - [DLP Business Consulting](https://firmussec.com/our-services/assurance/dlp-business-consulting/) - [ISMS | ISO 27001 Consultancy Services](https://firmussec.com/our-services/assurance/isms-iso-27001-consultancy-services/) - [Business Continuity Planning (BCP) / IT Disaster Recovery (IT DR) Consulting](https://firmussec.com/our-services/assurance/business-continuity-planning-bcp-it-disaster-recovery-it-dr-consulting/) - [Enterprise Security Strategy & Roadmap](https://firmussec.com/our-services/assurance/enterprise-security-strategy-roadmap/) - [SC Cyber Risk Guidelines Assessment](https://firmussec.com/our-services/assurance/sc-cyber-risk-guidelines-assessment/) - [SWIFT Security Assessments](https://firmussec.com/our-services/assurance/swift-security-assessments/) - [Security Compliance Assessment (BNM/MAS/MCMC)](https://firmussec.com/our-services/assurance/security-compliance-assessment-bnm-mas-mcmc/) - [External Service Provider (ESP) Cyber Security Risk Assessment](https://firmussec.com/our-services/assurance/external-service-provider-esp-cyber-security-risk-assessment/) - [Physical and Environment Security Assessment](https://firmussec.com/our-services/assurance/physical-and-environment-security-assessment/) - [Self-Service Terminal (SST) Assessment](https://firmussec.com/our-services/assurance/self-service-terminal-sst-assessment/) - [BNM Data Centre Resilience and Risk Assessment (DCRA)](https://firmussec.com/our-services/assurance/bnm-data-centre-resilience-and-risk-assessment-dcra/) - [MAS Threat and Vulnerability Risk Assessment (TVRA)](https://firmussec.com/our-services/assurance/mas-threat-and-vulnerability-risk-assessment-tvra/) - [Security Posture Assessment (SPA)](https://firmussec.com/our-services/assurance/security-posture-assessment-spa/) - [Assurance](https://firmussec.com/our-services/assurance/) - [Red Teaming](https://firmussec.com/our-services/assessment/red-teaming/) - [Network Resiliency Assessment](https://firmussec.com/our-services/assessment/network-resiliency-assessment/) - [Intelligence Led Penetration Testing](https://firmussec.com/our-services/assessment/intelligence-led-penetration-testing/) - [Compromise Assessment](https://firmussec.com/our-services/assessment/compromise-assessment/) - [Breach and Attack Simulation (BAS)](https://firmussec.com/our-services/assessment/breach-and-attack-simulation-bas/) - [Wireless Penetration Testing](https://firmussec.com/our-services/assessment/wireless-penetration-testing/) - [Social Engineering](https://firmussec.com/our-services/assessment/social-engineering/) - [Security Configuration Review](https://firmussec.com/our-services/assessment/security-configuration-review/) - [Mobile Application Penetration Testing](https://firmussec.com/our-services/assessment/mobile-application-penetration-testing/) - [Source Code Review](https://firmussec.com/our-services/assessment/source-code-review/) - [Web Application Penetration Testing](https://firmussec.com/our-services/assessment/web-application-penetration-testing/) - [Resources](https://firmussec.com/resources/) - [Solutions](https://firmussec.com/solutions/) - [Network Penetration Testing](https://firmussec.com/our-services/assessment/network-penetration-testing/) - [Assessment](https://firmussec.com/our-services/assessment/) - [Our Services](https://firmussec.com/our-services/) - [Contact](https://firmussec.com/contact/) - [About Us](https://firmussec.com/about/) - [News & Events](https://firmussec.com/news/) - [Home](https://firmussec.com/) [comment]: # (Generated by Hostinger Tools Plugin)