NACSA Raises Malaysia’s Cybersecurity Threat Level To Medium

On November 4, 2026, the National Cyber Security Agency (NACSA) in Malaysia increased the country's National Cyber Security Threat Level (NCTL) from Low to Medium. This move aims to ensure essential services continue to function properly in light of current security developments. The National Security Council's MKN revealed that NACSA held discussions with various sector heads and National Critical Information Infrastructure (NCII) entities to improve cybersecurity readiness.

As a result, nine mandatory preparedness measures were established for all NCII entities, including 24-hour security monitoring, regular system updates, multi-factor authentication, and updated Service Continuity Plans. Furthermore, NCII heads are now required to submit weekly threat status reports to NACSA. Meetings were held on November 3, 2026, between ministry secretaries-general and service heads.

NACSA continues cybersecurity operations through the National Cyber Coordination and Control Centre (NC4), which issues alerts, enhances threat detection, and monitors the security status of NCII entities and government agencies. In October 2026, NC4 issued eight alerts and advisories regarding vulnerabilities affecting critical infrastructure operators and government agencies.

Prime Minister Anwar Ibrahim previously warned about potential cyberattacks due to escalating geopolitical conflicts and Malaysia's growing digital infrastructure, data centre industry, and strong stance on certain international issues.