📌Start Here

Rectifyq publishes a lot. You don’t need all of it. Find your role below and click your tile to follow that lane.

Which one are you?

🧭 CISO / Manager Trends and justification 🏢 Business Owner Plain-language risk 🔎 CTI Analyst Context, actors, TTPs 🖥️ SOC / IR Analyst IoCs and detections 🏭 OT / Plant Engineer ICS threats & advisories 🌱 Student / Newcomer Getting into cyber

---

🧭 CISO / Security Manager

1. Rectifyq Radar — one read a month keeps you current.
2. Breach Watch — local ransomware claims and leaks by sector, since 2018. Nothing justifies budget like local numbers. Victims always masked.
3. Vulnerability Watch — is Malaysia (and your sector) actually exposed to the CVE in the news?

🏢 Business Owner

1. Rectifyq Radar — plain-language monthly summary of what’s hitting Malaysian organizations.
2. Tanya Rectifyq — ask anything, anonymously. “Kena ransomware, siapa nak call dulu?” is a perfectly good question.

Reporting an incident?

Rectifyq is a private CTI initiative, not an official channel. For incidents, contact NACSA or MyCERT Cyber999 — and note that NCII entities have mandatory reporting obligations under the Cyber Security Act 2024. Details in Contact.

🔎 CTI Analyst

1. Threat Actor Profiles — 47+ groups clustered by suspected origin (heavily China-nexus among APTs), mapped to MITRE ATT&CK and the Diamond Model.
2. Intelligence Program — our open PIR/GIR. Map them against your org’s requirements to know which tags to watch.
3. Style Guide — relevancy 🔴🟡🟢, severity, category, sub-category, threat actor category, target scope — filter with precision.
4. MISP-MY — every entry links to its MISP event for structured pivoting. See Feeds.

On attribution

Actor clustering and naming are interpretations by specific researchers and vendors. For most organizations, generic detection of TTPs offers higher defensive value than definitive attribution — formal attribution is the domain of law enforcement and government.

🖥️ SOC / IR Analyst

1. Threat Watch — every entry ships defanged IoCs ready for your SIEM or TIP, linked to its MISP event. Filter 🔴 Highly Relevant first.
2. Feeds — pull continuously instead of copy-pasting: MISP-MY, MISP-ICS-OT, and yearly instances at feeds.rectifyq.com, plus t.me/rectifyq for real-time local IoC alerts.
3. Vulnerability Watch — CVEs with confirmed Malaysian exposure. Listed here = check your attack surface today.

Integrating with your SIEM/TIP?

Email us at [email protected].

🏭 OT / Plant Engineer

1. OT Watch — global scoped OT/ICS threats, flagged where they touch equipment common in Malaysian CNII.
2. OT Threat Landscape — Overall Global Scoped ICS/OT Threat Landscape in one page.
3. MISP-ICS-OT feed — structured OT indicators: https://feeds.rectifyq.com/MISP-ICS-OT.

🌱 Student / Newcomer

1. Events Calendar — CTFs (Wargames.my, iCTF, and more), meetups, and conferences across Malaysia. Turun padang; most careers here start at a meetup.
2. Tanya Rectifyq — no question is too basic.
3. Certification Comparison and Subscription Comparison — spend your ringgit wisely.
4. PhishHuntMY — hunt a real phishing campaign targeting Malaysians, write it up. Best portfolio piece you can build.

How to read a threat entry

Tag	Meaning
🔴 Highly Relevant	Direct or confirmed Malaysian targeting/impact — act on it
🟡 Somewhat Relevant	Regional (ASEAN/SEA) relevance or plausible MY exposure
🟢 Informational	Global threat, indirect relevance — awareness only
targeted / broad-based	Specific MY org/sector vs. global campaign with MY exposure
⚔Threat / 🔰Defense / 📰News	Entry category

Full reference: Rectifyq’s Style Guide.

Semua orang boleh contribute — see Contribute.