KUALA LUMPUR, October 19, 2026 – Cybersecurity must be treated as a national security priority rather than merely an information technology (IT) concern, as data breaches, online scams and system intrusions increasingly threaten national interests and public confidence in government institutions.
The rapid advancement of digital technology, particularly artificial intelligence (AI), has created new opportunities for cybercriminals to deceive users, steal sensitive information and exploit vulnerabilities in digital communication systems.
As government administration, financial transactions and public services become increasingly dependent on the Internet, weaknesses in data protection could result in financial losses, disrupt essential services and expose the country to broader security risks.
RISING AWARENESS MUST BE MATCHED BY STRONGER PROTECTION
Malaysia Cyber Consumer Association president Siraj Jalil said growing public concern over scams and hacking reflected greater awareness of cyber threats, although this had not necessarily translated into adequate protection.
Citing the GSMA ASEAN Consumer Scam Report, he said 96 per cent of consumers were worried about becoming victims of scams or hacking, while 66 per cent had changed their daily behaviour to protect themselves against such threats.
He stressed that the responsibility for cybersecurity should not fall entirely on individuals, particularly as cybercriminals continued to develop increasingly sophisticated methods.
Blaming victims for falling for scams was insufficient, he said, as attacks could exploit weaknesses in data protection systems and transaction verification mechanisms.
Siraj added that persistent cyber threats could also undermine public confidence in digital communication channels.
The report found that 41 per cent of consumers ignored calls from unknown numbers, while 56 per cent avoided incoming calls altogether.
He said such behaviour demonstrated how cyber threats could disrupt everyday activities, including legitimate communications between the public, government agencies and financial institutions.
When people became increasingly reluctant to trust calls or messages, official communication channels could also be affected, making it more difficult to deliver important information.
GENERATIVE AI MAKES CYBERATTACKS MORE CONVINCING
Siraj said cybersecurity should no longer be viewed as the sole responsibility of engineers and IT specialists, as human vulnerabilities could also provide opportunities for attacks with national security implications.
Modern cybercriminals did not necessarily require advanced programming skills, as they could exploit weaknesses through impersonation, psychological manipulation and convincing scams.
He said generative AI had enabled criminals to create personalised phishing messages, clone voices and produce deepfake videos that imitate real individuals.
These developments made it increasingly difficult for the public to distinguish genuine communications from manipulated content, raising the risks of identity theft, financial fraud and unauthorised access to systems.
Weak passwords and connections to unsecured networks could also expose personal and organisational information to malicious parties.
Siraj called for coordinated action involving the government, industry and digital platform operators to establish a safer digital environment.
Among the measures needed were stronger data protection, tighter controls on scam advertisements and improved capabilities to detect and block suspicious transactions.
He also emphasised the importance of educating the public to recognise scam warning signs and verify information before responding to requests involving money or confidential data.
DATA BREACHES CAN ERODE PUBLIC TRUST
Universiti Utara Malaysia (UUM) School of Multimedia Technology and Communication dean and Advanced Communication Research Unit researcher Associate Professor Dr Mohd Khairie Ahmad said cybersecurity was closely linked to national sovereignty, as data and information had become essential resources underpinning economic activities and everyday life.
He said cyber threats extended beyond computer hardware and internal organisational systems to include the security of communication channels used for work, business and daily interactions.
With society increasingly dependent on the Internet, disruptions to digital communication systems could have widespread consequences for service delivery and economic operations.
Mohd Khairie said sensitive data leaks and the exposure of government information could erode public confidence in national institutions, particularly when protected information fell into the wrong hands.
Such incidents could also influence how investors and international stakeholders assessed Malaysia’s ability to safeguard information and maintain operational security.
He added that weaknesses in one organisation’s data protection measures could raise concerns about the security of other institutions.
A country’s ability to protect its data and digital infrastructure was therefore becoming an important measure of national resilience, alongside conventional defence capabilities.
TIMELY COMMUNICATION VITAL DURING CYBER INCIDENTS
Mohd Khairie said cybersecurity strategies should also prioritise effective communication, particularly when organisations faced data breaches or the spread of false information.
Delays in explaining a cyber incident could create an information vacuum that might be filled by rumours, speculation and unverified claims, potentially worsening the crisis and damaging an organisation’s reputation.
He said government agencies and corporate organisations needed to provide accurate, clear and timely updates without compromising sensitive information under investigation.
Transparent communication would help the public understand the situation, make informed decisions and reduce the influence of misinformation.
He also warned that the irresponsible use of AI and social media could intensify cyber threats by making false content easier to generate and distribute.
The widespread circulation of misleading information could lead to information fatigue, making it more difficult for people to assess facts and distinguish truth from falsehoods.
Mohd Khairie said digital platform providers should also share responsibility for user safety, alongside efforts to strengthen public education and awareness.
He called for continuous reviews of the legal framework to ensure it kept pace with technological developments, including the Cyber Security Act 2024 (Act 854), which provides a foundation for addressing cybersecurity threats.
LOCAL EXPERTISE KEY TO SAFEGUARDING NATIONAL INTERESTS
Aras Integrasi Sdn Bhd director of cybersecurity practice Faurani Jaafar said the leakage of sensitive government information could have consequences extending far beyond technology.
He cited military asset procurement information as an example of strategic data that, if compromised, could reveal details about Malaysia’s defence plans and the assets it intended to acquire.
Protecting such information through effective cybersecurity measures was therefore essential to safeguarding national interests and strengthening security.
Meanwhile, Aras Integrasi chief technology officer Farul Mohd Ghazali said Malaysia needed to develop stronger domestic capabilities to investigate cyber incidents without relying entirely on foreign technology providers.
He said technological independence involved more than owning locally developed products, as the country also needed the expertise to operate, maintain and continuously improve critical systems using local talent.
Farul said Malaysia had skilled professionals and AI capabilities that could support the development of competitive homegrown technologies.
As part of these efforts, Aras Integrasi has developed three cybersecurity platforms — VoronCitadel, GovSec and chainSENTRY — to address different aspects of cyber risk and digital forensics.
The platforms were developed using local talent and technology, with GovSec developed in collaboration with CyberSecurity Malaysia.
On Oct 5, Deputy Digital Minister Datuk Wilson Ugak Kumbong said Malaysia needed to strengthen its technological capabilities, protect data sovereignty and incorporate security into the systems it developed to achieve its ambition of becoming an AI Nation by 2030.
He made the remarks at the opening of the Cyber Digital Services, Defence & Security Asia 2026 exhibition and conference.
-Bernama
