Kuala Lumpur:Cybercriminals are increasingly targeting physical systems and operational technology to disrupt daily life, rather than solely focusing on data theft. This shift in focus highlights a rising trend in cyberattacks aimed at essential public services.
According to BERNAMA News Agency, Dr. Megat Zuhairy Megat Tajuddin, Chief Executive of the National Cyber Security Agency (NACSA), emphasized that Malaysia is not immune to these threats. Recent incidents in Europe, such as attacks on supermarket operations and blood bank systems, illustrate the new strategy of cybercriminals to disrupt essential services. He noted that advances in artificial intelligence have enabled more sophisticated and widespread attacks against multiple organizations.
Dr. Megat Zuhairy highlighted that operational technology systems, particularly in sectors like healthcare, energy, water supply, and supply chain, are vulnerable if they lack adequate protection. NACSA has urged entities within the National Critical Information Infrastructure (NCII) to isolate critical systems from external networks and keep their service continuity plans updated. He added that while no system is completely immune, preparedness can mitigate the impact of cyber incidents.
From a regulatory standpoint, the Cyber Security Act 2024 mandates NCII entities to adhere to stringent security practices to ensure system resilience. For non-NCII organizations, NACSA has released guidelines to improve threat preparedness and response capabilities. Dr. Megat Zuhairy also addressed the National Security Council's decision to elevate the National Cyber Threat Level from Low to Moderate as a proactive measure, emphasizing that it does not indicate a crisis.
He stated that enhancing threat intelligence sharing, developing local talent, and utilizing AI for monitoring are crucial for strengthening cyber defenses. Training and simulation exercises, coupled with the establishment of the Cyber Security and Cryptology Development Centre, are steps towards bolstering Malaysia's cyber security expertise and technological capabilities.