Digital Signage Security in Malaysia: Lessons from Kluang and Egypt

Image from @kluanghariini (Threads) Digital signage security depends on more than the screen. Protecting an LED billboard, digital menu board or interactive display requires secure accounts, properly configured media players, maintained software and someone responsible for keeping the system running safely.

Recent incidents in Kluang, Johor, and Giza, Egypt, have brought this responsibility into public view. For Malaysian businesses using digital screens, they are a reminder that installation is only the beginning of managing a signage system.

What happened in Kluang and Egypt?

On 30 October 2026, Malaysian police reported an investigation into the alleged hacking of eight LED screens belonging to the Kluang Municipal Council. The incident occurred the previous day, when obscene content appeared on public displays. The affected screens were switched off after the operator contacted the supplier. Source: The Star, 30 October 2026

Image from The Cairo Report

On 29 October, a separate incident affected an advertising billboard along Egypt’s 26 July Corridor in Giza. Egypt’s Interior Ministry said an international company providing electronic advertising distribution had suffered a cyberattack, resulting in inappropriate footage appearing on screens in several countries simultaneously. The statement did not identify that international provider or list the countries. Source: Egyptian Interior Ministry, 29 October 2026 (Arabic)

At the time of writing, these statements do not establish the precise technical cause of the Kluang incident or confirm that both incidents involved the same vulnerability.

There is therefore no basis here to blame a particular screen manufacturer, media player or signage platform. The practical lesson is that public-facing screens need ongoing security management.

Why can an LED billboard be hacked?

An LED screen displays the content supplied to it. Behind that display may be a media player, an LED controller, a content management system (CMS) and a network connection.

If someone gains unauthorised control of a component that can publish or replace content, they may be able to change what the billboard shows.

This is why securing a signage installation means considering the whole system. Strong CMS protection should be accompanied by appropriate security for the player, controller, network and any remote-support tools.

The Outdoor Advertising Association of America’s security guidance addresses this directly, recommending measures such as changing default passwords, restricting management access, applying patches and disabling unused services. Source: OAAA Digital Billboard Security Guidelines

A factory-supplied media player can be suitable for its intended purpose. However, getting a video onto a screen is different from preparing that screen for long-term operation in a public space.

Before handover, someone should check the passwords, user accounts, network access, remote-control functions and update arrangements. Leaving the original settings untouched can leave avoidable risks. Certain common passwords or default open systems may have already been compromised and can be used by hackers. Hackers use tools like scanners to detect for these vulnerabilities worldwide.

The same principle applies to paid and free software. A subscription does not automatically make a system secure, and bundled software is not automatically unsafe. What matters is how the solution is configured, maintained and supported.

For a business purchasing digital signage in Malaysia, a useful question is:

“Who will look after this system after installation, and what does that responsibility include?”

Six practical ways to improve digital signage security

1. Replace default passwords and control access

Use strong, unique passwords. Give staff their own accounts where possible, limit administrator access and remove accounts when employees no longer need them.

2. Enable two-factor authentication

Two-factor authentication, or 2FA, adds a second verification step when signing in. This helps protect an account if its password is stolen.

SP Signage supports 2FA, and we encourage customers to enable it, particularly for accounts with publishing or administrative access. Source: Google - Protect your business with 2-Step verification

3. Use an encrypted connection

Look for HTTPS when accessing the CMS. It encrypts information travelling between your browser and the server. Player connections should also be configured securely.

SP Signage uses HTTPS, commonly referred to as SSL protection. Encryption protects the connection, but it must work alongside secure accounts and maintained software.

4. Keep the software and devices updated

Updates can address newly discovered weaknesses, so maintenance should continue after the original installation. Having a vendor or 3rd monitor who regularly maintains, patches and who are aware of the latest cybersecurity updates is critical in ensuring a safe system.

5. Close unnecessary ways into the system

Ask your installer to restrict remote access and disable unused management features. A manufacturer app, wireless connection or remote-support account should remain available only when needed and appropriately protected.

6. Prepare a response plan

Sometimes, the unforeseen may occur even if all steps are taken. Know whom to contact and how to stop an unwanted display quickly is therefore essential. Keep the supplier’s support details accessible and agree on a shutdown or blank-screen procedure before an incident occurs.

How SP Signage supports a maintained signage environment

At Southpaw, we treat digital signage as an ongoing service. Our role extends beyond supplying a player or uploading the first playlist.

Our SP Signage CMS is hosted in a professional data centre in Singapore, rather than on a server in our office.

Hosted in a Grade A Data Center in Singapore lists card and biometric access, 24/7 on-site security, fire suppression and backup power infrastructure. These provide physical and infrastructure safeguards for the hosting environment.

Figure : Data Center Specifications

Those safeguards are one part of the overall setup. Server configuration, CMS updates, customer accounts and connected devices still require attention.

Our SP Signage service combines:

• 2FA support to add protection to user logins.

• HTTPS connections to protect information in transit.

• Regular maintenance and applicable security patches to address software updates and known vulnerabilities.

• Local Malaysian support for setup, troubleshooting and ongoing assistance.

SP Signage also provides centralised content scheduling, user permissions and visibility into display status, helping customers manage their screen networks more consistently. Learn about SP Signage

No connected platform can promise that an incident will never happen. The objective is to reduce avoidable risks, maintain the system and have a clear response when help is needed.

Why an affordable yearly subscription has value

When comparing digital signage quotations, the initial hardware price is only part of the cost.

A system also needs hosting, maintenance, software updates and technical support throughout its working life. Without an ongoing arrangement, responsibility for those tasks can become unclear. Southpaw keeps SP Signage’s yearly subscription affordable so businesses can budget for continued CMS hosting, maintenance, applicable patches and local support.

The value is having a team responsible for looking after the service—not simply paying for permission to display a video.

Frequently asked questions about digital signage security

Can digital signage be hacked?

Yes. Unauthorised access to a publishing account, CMS, media player or another connected component can affect what appears on a screen. Secure configuration and ongoing maintenance help reduce that risk.

Is a manufacturer-supplied player unsafe?

Not necessarily. Its suitability depends on the device, configuration, access controls and maintenance. Default credentials and unnecessary remote-access features should be reviewed before use.

Can SP Signage work with existing screens?

In many cases, existing screens can be retained and connected to a compatible media player. Southpaw can advise on the hardware, software and setup requirements. SP Signage is not tied to a manufacturer brand and is supported universally.

In summary, The Kluang, Johor incident is a reminder to review how public displays are managed, without jumping to conclusions about an unconfirmed cause.

Whether you operate a retail outlet, restaurant, property sales gallery, shopping mall or corporate office, your screens represent your organisation every time they turn on.

Looking for digital signage software with local Malaysian support? Explore SP Signage or contact Southpaw to discuss your screens, hosting and ongoing maintenance requirements.