KUALA LUMPUR, Nov 9 – Cyberattacks are becoming more dangerous as hackers increasingly target essential services instead of focusing only on stealing personal information.
National Cyber Security Agency (NACSA) chief executive Dr Megat Zuhairy Megat Tajuddin said cybercriminals are now targeting physical systems and operational technology (OT).
These systems control important services such as healthcare, electricity, water supply and supply chains.
He warned that Malaysia also faces this growing threat. A successful attack could disrupt services that people depend on every day.
Hackers Target Essential Public Services
Megat Zuhairy pointed to recent cyber incidents in Europe as examples of the growing danger.
Some attacks disrupted supermarket operations and affected refrigeration systems used by blood banks.
These incidents show how cybercriminals can use digital attacks to interfere with essential services. The consequences can go beyond financial losses or stolen information.
He also warned that artificial intelligence (AI) has made cyberattacks faster and more widespread.
With AI, hackers can automate attacks and target several organisations at the same time.
As a result, cybercriminals can increase the scale and intensity of their operations.
Malaysia Strengthens Cybersecurity Protection
NACSA has urged organisations that manage National Critical Information Infrastructure (NCII) to strengthen their protection.
These organisations should separate critical operational systems from external networks. They must also review and update their service continuity plans regularly.
Operational technology controls physical equipment and industrial processes. If organisations connect these systems directly to the internet without proper protection, attackers may exploit security weaknesses.
Megat Zuhairy stressed that no system is completely safe from cyberattacks. However, strong preparation and quick recovery plans can reduce the impact on the public.
The Cyber Security Act 2024 (Act 854) also requires NCII organisations to follow strict cybersecurity practices.
Meanwhile, NACSA has issued separate guidelines for organisations outside the NCII category. These guidelines cover threat preparation, early detection, incident response and service continuity.
Cyber Threat Level Raised to Moderate
The National Security Council (MKN) raised Malaysia’s National Cyber Threat Level from Low to Moderate on Nov 4.
Megat Zuhairy explained that the decision serves as a precautionary measure. It does not mean Malaysia is facing a national cybersecurity crisis.
Following the decision, sector leaders and NCII organisations must strengthen monitoring and submit weekly reports to NACSA.
He also stressed that cybersecurity requires cooperation from everyone. The public should follow good security practices and avoid spreading unverified information.
Stronger Cooperation Needed to Fight Cyberattacks
Looking ahead, Megat Zuhairy said Malaysia must improve information sharing between government agencies and industry players.
He also highlighted the need to develop local cybersecurity talent and use technology, including AI, to monitor digital threats.
In addition, regular training and simulated cyberattack exercises can help organisations prepare for real incidents.
The establishment of the Cyber Security and Cryptology Development Centre (CSCDC) under NACSA will also strengthen Malaysia’s technical expertise and cybersecurity capabilities.
As cyber threats continue to evolve, protecting digital systems is no longer enough. Malaysia must also ensure that essential services can continue operating when attacks occur.
Source : BERNAMA | Rewritten By Minutesmy
