Malaysia Raises Cyber Threat Level to Medium, Steps Up Critical Infrastructure Protection

Illustration of Malaysia’s cybersecurity preparedness

Malaysia raised its National Cyber Threat Level from low to medium on 4 November 2026, with NACSA coordinating stronger protection for critical information infrastructure and government systems. The National Security Council described the change as a precaution to improve preparedness and keep essential services operating.

Stronger monitoring and account protection

NACSA has met sector leads and relevant agencies to coordinate defensive measures. The announced priorities include round-the-clock monitoring, patching vulnerabilities, stronger use of multi-factor authentication and updated plans to maintain and restore services during an incident.

Critical infrastructure sector leads are also required to submit weekly threat-status reports to NACSA. The preparedness measures were presented at a special meeting of ministry secretaries-general and heads of service on 3 November.

NC4 continues to monitor threats

The National Cyber Coordination and Command Centre, NC4, will continue monitoring, detection and assessment, alongside alerts and protective guidance for government agencies and critical infrastructure operators. During October, it issued eight vulnerability alerts and advisories.

For members of the public, the announcement concerns an increased state of readiness. The statement does not identify personal accounts affected by the change or announce nationwide service disruption. For current alerts, consult the official NC4 portal.

Source MDROID’s original report.