Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

VSS Malaysia and Employment Contracts in Malaysia: A Practical Legal Guide

Employment relationships in Malaysia are generally built around an employment contract, which sets out the terms and conditions governing the relationship between an employer and an employee. Salary, working hours, leave, benefits, duties, confidentiality, termination and other important matters are commonly addressed in the employment contract.

Your Invoice Fraud Controls Probably Never Look at the Signature

Business email compromise took $3 billion in reported losses during 2025, the second-largest category in the FBI's Internet Crime Complaint Center annual report after investment fraud. The same report logged 1,008,597 complaints and $20.877 billion in total losses, up 26% on the year before. The control most organisations built in response is a callback procedure. Payment details changed? Phone the supplier on a number you already had. That control works, and it's worth having.

How Security Awareness Training Safeguards Operations

In any organisation, your people are your most valuable asset, but they can also be your greatest security vulnerability. Technical safeguards like firewalls and antivirus software are essential, but they can't stop a well-meaning employee from clicking a malicious link or unintentionally exposing sensitive data. This is where security awareness training becomes critical. It's not just about ticking a compliance box; it's about transforming your entire team into a proactive and vigilant line of defence that safeguards your daily operations.

Non-Technical? You Can Still Succeed in Cybersecurity #cybersecurity #beginners #nontechnical

Cybersecurity for beginners does not require you to arrive with years of technical experience. Feeling like an outsider, learning unfamiliar terminology and building knowledge as you go are all part of developing the skills needed to work in information security.

Microsoft Entra to Retire SMS & Voice MFA by 2027: What Organizations Need to Know

Microsoft is making a major change to the authentication experience in Microsoft Entra. The company has announced the retirement of Microsoft-provided SMS and Voice MFA, with passkeys set to become the default sign-in method. This shift reflects Microsoft's broader push toward phishing-resistant authentication as organizations face increasingly sophisticated phishing, social engineering, and AI-driven attacks.

LMS Single Sign-On (SSO): Secure Access to Learning Management Systems

Every LMS rollout starts the same way: pick a platform, upload the courses, get people logged in, move on. Then a second platform gets added. Then a certificate program. Then a separate tool for employee onboarding. Each one arrives with its own login screen, and everyone downstream, students, instructors, IT, ends up managing another password. Single sign-on solution for LMS fixes that.

Does Cyber Insurance Cover AI Incidents?

The answer changed on a specific date. Until the start of 2026, most organizations were covered for AI losses by silence rather than by grant, because policies neither affirmed nor excluded AI and the question would have been argued at claim time. On January 1, 2026 the standard forms organization introduced generative AI exclusion endorsements for commercial general liability, and carriers began attaching them at renewal. ‍

A Prompt Is Not a Boundary: Lessons From the AI Eval Incidents

Three organizations had their production systems compromised by an AI model in April, and found out in late July when the model's developer called them. None of them had detected the activity. One was a security company whose own package scanner was the entry point. ‍ Anthropic published that account on July 30, nine days after OpenAI disclosed a related incident of its own.

The work runs itself with Jeff Wang from Cognition, Richard Liu from Anthropic | Zero-Shot Learning

While AI agents are already capable of writing and shipping code that works, standard operating procedure still requires human oversight and review. Cognition President of New Enterprise Jeff Wang is building a future where that’s no longer the case. In this episode, Jeff joins 1Password CTO Nancy Wang and special guest co-host Richard Liu, Head of API Products at Anthropic, for a conversation on cloud-based agents and how their ability to prove their own work could make human code reviews obsolete.