Cyber Watch methodology
Every row is hand-checked against a linked source. Updated 8 Nov 2026.
📌 Status labels
| Label | Meaning |
|---|---|
| ✅ Confirmed | The organisation, a regulator, the police or a minister said it happened, as reported by a named outlet. |
| ⚠️ Claimed | An attacker, leak site or researcher says it happened. Nobody with authority has confirmed it. |
| 🚫 Disputed | Claimed, and the organisation denied it. The denial is shown as its Response. |
🔎 What counts
- Cyber incidents disclosed or claimed in 2026, dated by disclosure or first report.
- Fines, arrests and court actions go in Statements. They do not add to incident counts.
- Each row shows the date it was last checked.
🌏 Coverage
- 50 countries. Malaysia is tracked in the most depth, then Southeast Asia; other countries carry their most notable incidents.
- Zero on the map means none recorded yet. Counts compare coverage, not national risk.
- 3 countries publish a national cyber threat level. Others show "No public level found" with the date it was checked.
🏛️ Official alerts
Pulled every 3 hours from national agencies' public feeds and pages, headlines unedited. Agencies that block automated access are shown as unavailable.
🗺️ Map
Shading counts curated reports. It is not a live attack feed. Malaysian states are shaded by the headquarters state of each named organisation.
📡 Data
data.json · RSS, worldwide · each country page has its own feed.
✍️ Corrections
Spot an error or a newer statement? Use the feedback button on the page.