A global cybersecurity firm, Kaspersky, has weighed in on Malaysia’s newly tabled Cybercrimes Bill 2026, describing the legislation as a relevant reflection to the nation’s rapidly changing digital landscape and increasingly complex online threat environment.
“When the Computer Crimes Act was first introduced in 1997, cybercrime largely centred on unauthorised access to computer systems, data interception and malicious software. Today’s cybercrimes bear little resemblance to the threats Malaysia faced nearly three decades ago.” said Kaspersky Director of Government Affairs and Public Policy for Asia Pacific, Heng Lee.
Lee highlighted that modern digital crime has shifted to AI deception, digital identity theft, financially motivated cyberattacks, and cross-border operations affecting key national systems, businesses, and individuals as a whole.
Malaysia’s rising cyber threats
Kaspersky’s statement highlights how deeply digital systems are embedded in everyday Malaysian life, powering essential services in banking, healthcare, and business, while increasingly turning to AI tools for daily work and productivity.
To illustrate the scale of the danger, Kaspersky revealed that its systems blocked more than 18.8 million web-based cyber threats in Malaysia in 2025 alone, approximately one attack attempt every two seconds.
According to Lee, the new bill reflects a major policy shift: cybersecurity is no longer just a technical background issue, but a key safety framework needed to protect how a digital nation functions on a daily basis.
Need for technical expertise
Looking beyond the legislative text, the firm emphasised that protecting a connected digital economy will require significant investments in technical workforce capabilities and structural alignment across digital sectors.
“This includes developing specialised expertise in areas such as digital forensics, cyber threat intelligence and AI-assisted investigations, alongside closer collaboration across government, industry and academia,” Lee continues. “These capabilities will play an important role in supporting Malaysia’s digital ambitions while ensuring the country is equipped to navigate a more complex cyber landscape.”
Concerns about media censorship and privacy risks
Introduced to replace the outdated Computer Crimes Act 1997, the Cybercrimes Bill 2026 creates modern legal definitions and tougher penalties for online offences, including AI-assisted fraud, deepfakes, data tampering, and non-consensual intimate image sharing.
However, the legislation has drawn sharp criticism from civil society organisations and media advocacy groups, including ARTICLE 19, the Centre for Independent Journalism (CIJ), and the Malaysian Media Council.
Critics warn that key provisions grant authorities sweeping search, seizure, and real-time data tracking powers without needing a court warrant. Rights groups argue this creates significant risks for personal privacy, whistleblower safety, and confidential journalistic sources.
