Brunei Cyber Watch
Reports since 1 Jan 2026. Not a live feed.
Threat level, Brunei
Background readingHacktivismIncident response
No public level found
No published national cyber threat level found for Brunei, checked 7 Nov 2026. Brunei publishes no cyber threat level; Cyber Security Brunei issues BruCERT alerts and annual incident statistics.
Source: Cyber Security Brunei
From official agencies
| Date | Agency | Advisory or alert |
|---|
Agency headlines, unedited.
Compare countries
| Country | Threat level | Confirmed | Claimed only | Via a vendor | Latest report |
|---|---|---|---|---|---|
| Medium | 19 | 35 | 7 | 7 Nov 2026 | |
| None published | 12 | 24 | 3 | 7 Nov 2026 | |
| None published | 6 | 32 | 0 | 5 Nov 2026 | |
| None published | 9 | 33 | 0 | 3 Nov 2026 | |
| None published | 9 | 35 | 4 | 7 Nov 2026 | |
| None published | 5 | 34 | 0 | 5 Nov 2026 | |
| None published | 4 | 2 | 0 | 7 Nov 2026 | |
| None published | 4 | 0 | 0 | 13 Jun 2026 | |
| None published | 4 | 4 | 1 | 7 Oct 2026 | |
| None published | 2 | 5 | 0 | 12 Oct 2026 | |
| None published | 1 | 4 | 1 | 29 Oct 2026 | |
| None published | 8 | 0 | 1 | 26 Oct 2026 | |
| None published | 2 | 3 | 0 | 8 Aug 2026 | |
| None published | 1 | 6 | 0 | 25 Jul 2026 | |
| None published | 9 | 2 | 1 | 28 Oct 2026 | |
| None published | 3 | 3 | 0 | 22 Jul 2026 | |
| None published | 1 | 5 | 0 | 23 Oct 2026 | |
| None published | 4 | 3 | 1 | 1 Jul 2026 | |
| None published | 0 | 3 | 0 | 10 Jun 2026 | |
| None published | 1 | 5 | 0 | 25 Oct 2026 | |
| None published | 0 | 0 | 0 | ||
| BRAVO-CRP | 5 | 0 | 4 | 1 Oct 2026 | |
| None published | 7 | 0 | 1 | 4 Nov 2026 | |
| None published | 7 | 0 | 1 | 1 Nov 2026 | |
| None published | 3 | 0 | 1 | 22 Oct 2026 | |
| None published | 2 | 0 | 0 | 14 Jul 2026 | |
| None published | 5 | 0 | 3 | 4 Nov 2026 | |
| None published | 3 | 0 | 1 | 16 Sep 2026 | |
| None published | 5 | 1 | 3 | 2 Nov 2026 | |
| None published | 4 | 0 | 1 | 2 Nov 2026 | |
| None published | 7 | 0 | 2 | 4 Nov 2026 | |
| None published | 5 | 1 | 1 | 2 Nov 2026 | |
| None published | 5 | 0 | 0 | 7 Nov 2026 | |
| None published | 3 | 0 | 0 | 5 Feb 2026 | |
| None published | 3 | 4 | 0 | 2 Nov 2026 | |
| None published | 5 | 3 | 2 | 2 Nov 2026 | |
| None published | 6 | 0 | 2 | 28 Aug 2026 | |
| None published | 5 | 0 | 1 | 21 Aug 2026 | |
| None published | 2 | 4 | 1 | 21 Aug 2026 | |
| None published | 2 | 2 | 0 | 2 Nov 2026 | |
| None published | 1 | 2 | 0 | 4 Aug 2026 | |
| None published | 1 | 2 | 0 | 2 Nov 2026 | |
| None published | 1 | 2 | 0 | 4 Nov 2026 | |
| None published | 9 | 0 | 5 | 4 Nov 2026 | |
| Caution | 6 | 0 | 2 | 29 Oct 2026 | |
| None published | 0 | 3 | 0 | 7 Aug 2026 | |
| None published | 9 | 0 | 2 | 3 Nov 2026 | |
| None published | 3 | 0 | 3 | 30 Oct 2026 | |
| None published | 5 | 0 | 1 | 2 Nov 2026 | |
| None published | 7 | 2 | 1 | 3 Sep 2026 |
2026 counts. Click a row to open a country.
Official numbers
| Measure | Value | Period | Source |
|---|---|---|---|
| Phishing websites recorded | 623 | 2025 | BruCERT NCIS 2025 |
| Phishing domains recorded | 221 | 2025 | BruCERT NCIS 2025 |
Who is targeting it
Laws and rules this year
- 14 Sep 2026Code of Practice for Critical Information Infrastructure v2.0. Adds clauses on secure AI use and Secure by Design under the Cybersecurity Act (Chapter 272), with new AI Security and Secure by Design guidelines. Source
Full stories
Official statements
- 3 Nov 2026BruCERT warned of fake invoice attachments. BruCERT
- 22 Oct 2026BruCERT issued an advisory on the PHP2Shell remote code execution flaws. BruCERT
- 14 Sep 2026Cyber Security Brunei released version 2.0 of the CII Code of Practice. Cyber Security Brunei
Incidents
0 of 0 incidents
| What happened | Sources |
|---|
FAQ
Does Brunei have a national cyber threat level?
No published national cyber threat level was found for Brunei (checked 7 Nov 2026). Brunei publishes no cyber threat level; Cyber Security Brunei issues BruCERT alerts and annual incident statistics.
Which organisations in Brunei confirmed cyber incidents recently?
None confirmed since January 2026 in our sources.
What counts as a confirmed incident?
The organisation, a regulator, the police or a minister has said something happened, as reported by a named outlet. Everything else is listed as claimed.
Why list leak-site claims at all?
Ransomware and extortion crews post victims on leak sites before anyone confirms. The list shows what attackers say. Treat it as a lead and check with the organisation.
Is the map a live attack feed?
No. It counts incidents and claims reported in 2026. Live attack maps from security vendors show scanning traffic hitting their sensors, which does not mean a place was attacked.
How often is it updated?
By hand when a national level changes or a notable incident is reported. The date is shown in the header.
Sources: official statements and regional press, including Bernama, The Star, Malay Mail, CNN Indonesia and Newsbytes.PH; leak-site claims from public ransomware trackers. Each entry links its source.