{
  "id": 19259324,
  "title": "Cyber threats to Malaysia now extend beyond data theft to daily disruption, Nacsa says",
  "url": "https://urgent.news/2026/11/10/cyber-threats-to-malaysia-now-extend-beyond-data-theft-to-daily",
  "topic": "world",
  "section": "World",
  "published": "2026-11-10T01:15:03.000Z",
  "source": {
    "name": "Malay Mail",
    "slug": "malay-mail",
    "url": "https://www.malaymail.com/news/malaysia/2026/11/10/cyber-threats-to-malaysia-now-extend-beyond-data-theft-to-daily-disruption-nacsa-says/242639"
  },
  "original_language": "en",
  "account": "KUALA LUMPUR, Nov 10 — Digital adversaries are increasingly targeting Malaysia's critical infrastructure, shifting their focus from simple data theft to causing daily disruptions through attacks on physical systems and operational technology, according to the National Cyber Security Agency (Nacsa). Chief Executive Dr Megat Zuhairy Megat Tajuddin highlighted that Malaysia is not immune to this threat, with attacks specifically aimed at industrial control systems in sectors such as healthcare, energy, water supply, and supply chains. Recent incidents in Europe, where supermarket operations and blood bank refrigeration systems were crippled, served as stark examples of how cyberattacks are now explicitly designed to disrupt essential public services. The situation has been exacerbated by advancements in artificial intelligence, which enable cybercriminals to conduct automated and simultaneous intrusions across multiple organizations, amplifying the scale, speed, and intensity of global cyberattacks. Nacsa emphasized that operational technology systems in these strategic sectors are particularly vulnerable if directly connected to the internet without proper safeguards. In response, the agency urged National Critical Information Infrastructure entities to isolate critical operational systems from external networks and maintain regularly updated service continuity plans. Megat Zuhairy stressed that while no system can be entirely immune to attacks, preparedness and swift recovery can mitigate the impact on the public. From a legal standpoint, the Cyber Security Act 2024 (Act 854) mandates NCII entities to adhere to stringent security practices to maintain the resilience of their service systems. For non-NCII entities, Nacsa provided the Cyber Security Threat Preparedness and Handling Guidelines to assist in enhancing preparedness, early detection, threat response, and service continuity. The National Security Council's (MKN) decision to raise the National Cyber Threat Level (NCTL) from Low to Moderate on Nov 4 was described as a precautionary measure, indicating a heightened state of preparedness rather than an indication of a crisis. Nacsa recommended that all sector leads and NCII entities increase monitoring and submit weekly reports to Nacsa, even without current incidents. Cyber security, Megat Zuhairy noted, is a collective responsibility, urging everyone to adopt proper security practices and avoid the dissemination of unverified information. To bolster future defenses, he emphasized the importance of rapid threat intelligence sharing between the government and industry, local talent development, and the use of AI-assisted technology for monitoring. Regular training, incident simulation exercises, and the establishment of the Cyber Security and Cryptology Development Centre (CSCDC) under Nacsa were also highlighted as crucial steps to enhance Malaysia's cyber security capabilities.",
  "summary": "KUALA LUMPUR, Nov 10 — Cybercriminals are increasingly shifting their focus beyond mere data theft to disrupting p...",
  "key_points": [
    "Cyber threats in Malaysia now disrupt daily operations, not just steal data",
    "Attacks target critical infrastructure in healthcare, energy, water, supply chains",
    "AI amplifies scale, speed of cyberattacks on operational technology systems"
  ],
  "editors_take": "The shift toward targeting industrial control systems forces Malaysian critical infrastructure providers to prioritize operational resilience and network isolation to prevent physical service disruptions caused by automated digital adversaries.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}