Nacsa raises cybersecurity threat level from ‘low’ to ‘medium’

The National Cyber Security Agency (Nacsa) has upgraded the national cybersecurity threat level from "low" to "medium." This precautionary measure, announced by the National Security Council (MKN), is aimed at ensuring essential services remain operational amid evolving security developments. Prime Minister Anwar Ibrahim highlighted the importance of this move during a speech in the Dewan Rakyat on November 3, in response to ongoing geopolitical and regional tensions.

Nacsa has convened meetings with heads of critical information infrastructure sectors to bolster readiness and coordination across various sectors. These meetings emphasized the implementation of nine cybersecurity measures, including 24-hour monitoring, system patching, multi-factor authentication, and updating service continuity plans. Additionally, NCII sector heads are now required to submit weekly threat status reports to Nacsa.

The National Cyber Coordination and Control Centre (NC4) is concurrently executing three key functions: issuing cybersecurity alerts and advisories, enhancing threat detection and assessment capabilities, and conducting cybersecurity monitoring of NCII entities and government agencies. These proactive measures aim to mitigate risks and prevent disruptions to essential services.

Throughout the previous month, NC4 issued eight alerts and advisories concerning vulnerabilities affecting NCII entities and government agencies. The MKN remains steadfast in its commitment to upholding the nation's security, stability, and sovereignty through comprehensive, integrated, and continuous preparedness measures. Anwar previously noted that Malaysia's robust digital infrastructure and stance on international issues, particularly regarding Palestine and Gaza, made the country potentially vulnerable to cyberattacks.