Malaysia's growing digital infrastructure could make the country a potential target for sophisticated cyberattacks, Prime Minister Datuk Seri Anwar Ibrahim warned, as the government moves to strengthen national preparedness and coordination among key institutions.
Speaking during Prime Minister's Question Time in the Dewan Rakyat on November 3, Anwar said Malaysia was among countries considered potential targets, citing its expanding digital infrastructure and data-centre capabilities, as well as its positions on several international issues, particularly Palestine.
He said the National Security Council (MKN) had been monitoring major cyber incidents overseas, including disruptions to government portals in Europe, breaches involving Denmark's central population registry and cyber intrusions affecting systems in the United States and Japan.
Anwar cautioned Malaysians against assuming such threats were distant, saying developments in these countries demonstrated how cyberattacks could disrupt essential government and public services.
In response, the government convened a special MKN meeting on November 2 to assess national preparedness and existing mechanisms for managing security threats.
Anwar said Chief Secretary to the Government Tan Sri Shamsul Azri Abu Bakar would coordinate a meeting with relevant government departments, while Bank Negara Malaysia would hold a separate session with financial institutions to assess potential risks and strengthen their preparedness.
He also proposed a special closed-door briefing by the MKN director-general for all Members of Parliament within the following one to two days, subject to agreement from both government and opposition representatives.
The government is also looking to strengthen coordination between ministries and agencies, improve information-sharing mechanisms and reinforce the protection of strategic sectors, including energy, transportation, finance and telecommunications.
Malaysia already has a regulatory framework under the Cyber Security Act 2024 (Act 854), which came into force on August 26, 2024.
The legislation establishes requirements for the protection of National Critical Information Infrastructure (NCII), covering 11 sectors, including government, banking and finance, transportation, healthcare, energy, telecommunications and digital services.
However, the growing scale of Malaysia's digital economy raises questions about whether existing cybersecurity measures and institutional capabilities are keeping pace with the country's technological expansion.
Malaysia has been positioning itself as a regional digital and data-centre hub, attracting major investments from international technology companies and expanding its role in the global semiconductor and artificial intelligence supply chains.
While these developments create opportunities for economic growth, they also increase the importance of protecting the infrastructure and information systems supporting these activities.
A major cyberattack could extend beyond the disruption of individual websites or databases, potentially affecting financial transactions, public administration, telecommunications and other essential services.
The exposure of personal information could also undermine public confidence in digital government services, particularly as more administrative and commercial activities move online.
This makes cybersecurity an issue that extends beyond technology departments, requiring coordinated efforts across government agencies, financial institutions and private-sector operators.
The challenge for Malaysia is therefore not only to attract digital investments and expand its technological capabilities, but also to ensure that the systems supporting this growth remain secure and resilient.
As the government steps up its preparedness against emerging threats, the effectiveness of its response will ultimately depend on whether stronger coordination is translated into concrete security measures, consistent enforcement and the ability to respond effectively when cyber incidents occur.