Malaysian Organizations Lag in Detecting Compromised AI Agents
A recent Cisco Relentless Defense Report reveals that only 53% of Malaysian organizations feel highly confident in their ability to detect and respond to compromised AI agents. The report, based on a global survey of 8,000 security professionals across 30 markets conducted in April and May 2026, highlights significant concerns about cyber resilience in Malaysia. The findings indicate that 83% of organizations in the country experienced a major, business-disrupting cyber incident in the past year, with nearly one-third involving AI-enhanced attacks.
The report assesses organizations on three key dimensions: coverage, speed, and friction. Malaysian organizations scored an average of 65 out of 100 globally. Only 8% of organizations, both globally and in Malaysia, meet Cisco's criteria as "Relentless Defenders," the top-performing group in the study. These top performers operate with greater coordination and shared visibility across security, networking, and IT teams, which is a stark contrast to the broader population.
The primary obstacle to stronger cyber defense in Malaysia is identified as organizational friction rather than technology gaps. The report notes that only 43% of Malaysian organizations have their security, networking, and IT teams working as a single unit with shared visibility and tools. Additionally, 43% struggle to translate business metrics into actionable information for leadership, and 34% lack a consistent way to measure security performance. Data access is another significant issue, with nearly half of organizations spending more time collecting and correlating data than addressing actual threats.
Despite these challenges, AI is delivering measurable improvements for security teams. Over 80% of practitioners report at least a 25% improvement in detection and response times, and more than one-third note a significant reduction in operational burden. However, fewer than half of organizations have extensively deployed AI-powered security capabilities, with the highest adoption in network security and data privacy, and the lowest in identity and access management.