Nacsa records 5,110 cyber incidents in Malaysia from January to September

KUALA LUMPUR, Nov 9 — The National Cyber Security Agency (Nacsa) documented 5,110 cybersecurity incidents between January and September this year, a slight decrease from 5,837 incidents in the previous year, according to Dr Megat Zuhairy Megat Tajuddin, Nacsa's chief executive. The rise in incidents during last year was largely due to early detection of intrusion attempts and potential attacks.

Nacsa's National Cyber Coordination and Command Centre (NC4) issued nine alerts and advisories in October and November 2025 regarding security vulnerabilities affecting critical national infrastructure and government agencies. Nacsa's focus lies on incidents that could disrupt essential services, not all cybersecurity incidents having the same impact.

Dr Megat Zuhairy highlighted a ransomware attack on Malaysia Airports Holdings Bhd in March 2025, causing Kuala Lumpur International Airport's (KLIA) disruptions for over 10 hours. The Live Map & Ranking display, which places Malaysia among the highest numbers of cyber attacks, is based on monitoring through specific cybersecurity products and platforms widely used by organizations.

Malaysia is a key data center hub, meaning a large volume of international internet traffic passes through the country, serving as a target or transit route for cyber attacks. Dr Megat Zuhairy clarified that the display does not reflect the overall cybersecurity situation of a country, as comprehensive assessments require considering various factors and data sources.

Malaysia's cyber threat level is currently moderate, per the National Cyber Threat Level (NCTL) assessment, and the country is ranked Tier 1 under the Global Cybersecurity Index (GCI). Malaysia is also preparing for the transition to Post-Quantum Cryptography (PQC) to address advancements in quantum computing technology. Individuals are also targets of cyber threats, particularly through social media, email, and online banking account hacking.

Dr Megat Zuhairy reminded the public of the difference between account hacking and online scams, urging them to take appropriate action if they encounter such situations.