KUALA LUMPUR, Nov 11 – Malaysia needs stronger cybersecurity measures to protect businesses from attacks on connected equipment, a cybersecurity expert has warned.
Recent attacks on supermarket refrigeration systems across Europe have exposed weaknesses in everyday technology. These attacks disrupted store operations and forced supermarkets to throw away spoiled food.
Adjunct Professor of Cybersecurity Practice at the University of Malaysia of Computer Science and Engineering (UNIMY), Murugason R. Thangaratnam, said Malaysian businesses could face similar threats.
He explained that hackers do not always need advanced skills to target connected equipment. In many cases, weak passwords and poor security settings can give attackers access.
Connected Equipment Creates Security Risks
Many supermarkets use internet-connected refrigeration units, monitoring platforms and building management systems.
These systems help businesses monitor equipment and manage daily operations. However, they can also create security risks when companies fail to protect them properly.
Murugason said businesses often focus on convenience and uninterrupted operations. As a result, security may not receive enough attention.
He also highlighted the growing connection between operational technology (OT) and information technology (IT).
OT controls physical equipment, such as refrigeration systems. Meanwhile, IT manages computers, networks and digital information.
When both systems connect, a weakness in one area could expose the wider business to cyberattacks.
One Weakness Could Affect Many Businesses
The expert warned that hackers could exploit similar systems across multiple supermarkets.
Many retailers rely on the same technology providers and remote maintenance services. Therefore, one security weakness could affect several locations at once.
Weak default passwords also increase the danger. Attackers may use common passwords or search for internet-connected devices that businesses have exposed online.
Murugason said hackers could then change refrigeration temperatures or disable warning systems. These actions could lead to food spoilage and business disruption.
He noted that Malaysian retailers and cold-chain operators also use similar connected systems. This means the country should not assume it is safe from such attacks.
Malaysia Needs Stronger Cyber Resilience
Murugason acknowledged the work of the National Cyber Security Agency (NACSA) and other agencies in developing Malaysia’s cybersecurity framework.
However, he said businesses must go beyond meeting basic security requirements. They need practical plans to prevent attacks and maintain operations during disruptions.
He recommended several steps. Businesses should identify every device connected to their networks, remove default passwords and limit public access to equipment.
They should also prepare manual backup procedures in case digital systems fail. Companies must test these plans regularly to ensure they work during an emergency.
In addition, Murugason called on businesses to hold technology vendors and service providers accountable for security.
He stressed that every part of the supply chain must take responsibility. Stronger protection requires cooperation between retailers, contractors and technology providers.
Source : BERNAMA | Rewritten By Minutesmy
