The National Cyber Security Agency (NACSA) has raised Malaysia’s National Cyber Security Threat Level (NCTL) from Low to Medium, effective 4 November 2026. The National Security Council (MKN) said the move is a precautionary measure in response to current security developments, aimed at ensuring the country’s essential services remain operational.

According to MKN, NACSA has held meetings with sector heads and entities within the National Critical Information Infrastructure (NCII) to strengthen cybersecurity preparedness across various sectors. These meetings also resulted in nine mandatory preparedness measures for all NCII entities.

Among the measures are 24-hour security monitoring, regular system patching, the implementation of multi-factor authentication (MFA), and updates to their respective Service Continuity Plans. NCII sector heads are also required to submit weekly threat status reports to NACSA.