AS artificial intelligence advances at an unprecedented pace, our lives are becoming increasingly interconnected through digital technology. While these developments bring greater convenience and efficiency to our everyday lives, they also expose us to new vulnerabilities and more sophisticated cyber threats.
The consequences of a security breach can extend far beyond stolen passwords or financial losses, potentially disrupting essential services and putting public safety and national security at risk. Today, cyber threats can endanger everything from food supplies and energy resources to the most sensitive aspects of our personal lives.
New threats every day
In recent weeks, several major cybersecurity incidents reported across international news outlets have highlighted the extent of these vulnerabilities.
Researchers using AI tools reportedly identified a vulnerability in the PHP programming language, which powers approximately 70% of websites worldwide, potentially exposing sensitive information to malicious actors. The discovery prompted government websites in several countries to temporarily shut down as authorities scrambled to address the vulnerability.
In a separate investigation, Al Jazeera and Citizen Lab revealed that an Israeli firm had allegedly used “zero-click” spyware to infiltrate the devices of the news agency’s journalists. Such spyware can grant attackers access to private information, all without requiring the victim to click on a malicious link.
The threat extends beyond computers and mobile devices.
Cyberattacks targeting internet-connected refrigeration and cooling systems in supermarkets reportedly caused equipment to malfunction, resulting in millions of euros worth of spoiled food across France, and soon after, other parts of Europe.
The attacks subsequently extended to cooling systems at French blood banks, raising even more serious concerns about the vulnerability of essential services and critical infrastructure to digital sabotage.
These incidents show how disruptions originating in cyberspace can have tangible consequences, affecting food supplies, healthcare services and public safety.
The world’s most powerful individuals and institutions are also not immune. In an October report, Vanity Fair published an excerpt from an upcoming book alleging that Dutch intelligence had gained access to the phone of Jared Kushner, the son-in-law to US President Donald Trump. Kushner denied the claims in the article and threatened legal action.
Regionally, reports in early November emerged that three Indonesian generals had been detained on suspicion of wiretapping President Prabowo Subianto.
Concerns over digital surveillance have also prompted some high-profile figures to take precautions. Former FBI Director James Comey and Meta CEO Mark Zuckerberg, reportedly cover their device cameras with physical tape to guard against potential surveillance.
Recent figures suggest that cybersecurity remains a significant concern for Malaysia.
The National Cyber Security Agency (Nacsa) recorded 5,110 cybersecurity incidents between January and September 2026, compared with 5,837 throughout 2025. Nacsa chief executive Dr Megat Zuhairy Megat Tajuddin attributed last year’s higher figure largely to intrusion attempts and potential attacks identified at an early stage.
Megat Zuhairy also revealed that the agency had issued nine alerts and advisories in October and November concerning vulnerabilities affecting critical infrastructure operators and government agencies.
On Nov 4, Nacsa raised Malaysia’s cyber threat level from low to moderate as a precautionary measure following current security developments.
In a parliament session earlier this month, Prime Minister Datuk Seri Anwar Ibrahim warned that Malaysia is a potential target for cyberattacks due to its expanding digital strength and its firm stance on Palestine.
As Malaysia becomes increasingly reliant on digital technology, cyber threats that may seem distant can hit much closer to home, putting our national security and everyday lives at risk. But just how prepared are we?
Increasingly sophisticated attacks
AI is making cyberattacks faster, more sophisticated and potentially more widespread. For ordinary Malaysians, this could mean increasingly convincing online scams, fraudulent banking transactions, identity theft and compromised internet-connected devices, says Universiti Sultan Zainal Abidin specialist in AI and cybersecurity Dr Ong Yew Chuan.
Beyond individual victims, Ong warns that attacks on critical sectors such as energy, agriculture and food supply chains could disrupt essential services, undermine economic stability and threaten national security.
“Vulnerable groups, particularly senior citizens and those with limited digital literacy, may face greater challenges in recognising increasingly convincing AI-generated scams,” he says.
Malaysia has introduced several measures to strengthen its cybersecurity framework, including the Cyber Security Act 2024 and amendments to the Personal Data Protection Act 2010. However, legislation alone is insufficient, says Ong, who argues that existing regulations and security standards must be effectively enforced and regularly reviewed to address emerging threats
“Authorities should strengthen security audits, incident reporting, cross-sector coordination and the protection of critical infrastructure, while investing in AI-assisted threat detection and response capabilities,” he says.
Most importantly, Ong stresses that cybersecurity awareness must become a sustained national priority. This means that education should be continuous, inclusive and accessible, particularly for senior citizens and communities with limited digital literacy.
Awareness still essential
As the bare minimum safeguard, Malaysians should develop basic cybersecurity knowledge, keep their devices updated, use strong and unique passwords, enable multifactor authentication and verify suspicious requests through trusted channels.
“We often hear that humans are the weakest link in cybersecurity. While technology plays a crucial role in protecting us, even advanced security systems cannot eliminate every risk. Cybersecurity awareness is therefore essential, although some sophisticated attacks, such as zero-click spyware, can occur without any action by the victim,” Ong explains.
With AI capable of generating highly convincing fake voices, images and videos, Ong warns that we must learn not to blindly trust everything we see or hear online.
“A healthy sense of scepticism and a habit of verification are becoming essential digital skills.”
The race to protect
AI has become a significant factor in the evolving cybersecurity landscape.
Because of this, Malaysia must not only respond to AI-driven threats but also proactively harness AI for early threat detection, vulnerability identification and faster incident response, says Ong.
“We are witnessing an accelerating race between attackers and defenders. While cybercriminals are exploiting AI to make attacks faster and more sophisticated, the same technology offers significant opportunities to strengthen cybersecurity,” says Ong, who adds that technology must be supported by skilled professionals, effective governance and continuous public education.
“Ultimately, cybersecurity is no longer just about protecting computers and personal data.
“It is about protecting our economy, essential services, national security and the everyday lives of Malaysians.”
