Ming Looi

Director (PCI-DSS)

Kin-Ming has more than 17 years of experience in information security.

Talk to an expert

Highlights

Career highlights

‍

PCI Qualified Security Assessor and 3D-Secure Assessor. Kin-Ming has more than 17 years of experience in information security, particularly in the PCI DSS field, with extensive prior business and technology strategy consulting and software development experience. He has extensive international experience delivering security consultancy, audit and other assignments across a wide range of sectors, including the telecoms, media, financial services, retail, technology, transport, leisure, luxury goods, charity, and New Zealand, UK and Middle-Eastern government sectors.

‍

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

TimePictra (Microchip) – Stored Cross-Site Scripting (XSS) (CVE-2026-3010)

During a security engagement, Steve Nyan Lin discovered a stored XSS vulnerability in the TimePictra web application which was due to a lack of input filtering. This affects the neName parameter when creating new network elements.

TimePictra (Microchip) – Lack of Authentication (CVE-2026-2844)

During a security engagement, Steve Nyan Lin discovered a lack of authentication within numerous functionaliy within the TimePictra web application which allowed viewing of sensitive information and making changes to network elements.

Silverstripe - Cross-Site Scripting (XSS) Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in the administrator panel of Silverstripe CMS, specifically in the handling of the user input within the form messages module.

Discover our services

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert

Employee Cyber Training & Awareness

Your people are your first line of defence. Our cyber training builds awareness and sharpens their instincts.

When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making.

Are you experiencing a security breach?

Incident Response