Pakistan Records Over 1,000 Cyberattacks in 2026 as National CERT Details Security Challenges

Pakistan Faces Surge of Cyberattacks in 2026

Pakistan has recorded more than 1,000 cyberattacks so far in 2026, raising concerns about the country's cybersecurity readiness. The alarming volume of digital intrusions highlights the growing vulnerability of national networks, critical infrastructure, and government databases against sophisticated external threats.

Lawmakers recently gathered to address these digital security challenges during a high-level meeting. The National CERT revealed vital operational details regarding its workforce and its technological capabilities during this parliamentary session.

National CERT Operations and Workforce Numbers

DG National CERT Haider Abbas shared these figures during a meeting of the National Assembly Standing Committee on IT and Telecom. He said the organization has a total workforce of 70 employees to manage nationwide digital defense operations.

Operating a national cybersecurity agency with a team of this size requires careful balancing of human oversight and automated systems. Managing thousands of malicious digital events places a heavy operational strain on the limited personnel available within the agency.

How National CERT Uses Artificial Intelligence

Haider Abbas also confirmed that National CERT uses AI agents to monitor cybersecurity threats. However, the organization still relies more heavily on manual operations to verify, analyze, and neutralize incoming digital threats.

He told the committee that 30% of its work depends on AI, while the remaining 70% is handled manually. This hybrid methodology reflects the caution state institutions exercise when deploying fully automated defensive software against unpredictable malicious actors.

Parliamentary Questions on Automated Security Risks

Committee members questioned whether relying on AI could itself create security risks. They also asked whether the technology could compromise existing security systems if deployed without proper safeguards or rigorous testing.

The DG explained the organization's approach to monitoring potential threats. He said Pakistan has a security monitoring center to identify and monitor cyber threats in real time across sensitive government and public digital assets.

Protecting Critical Infrastructure During National Events

The committee chairman also raised concerns about cyberattacks during important national events. He pointed out that hacking attempts increase around August 14 and September 6, periods that hold immense symbolic and political importance for the country.

He questioned what measures authorities were taking to prevent attacks on these dates. The discussion highlighted the need for stronger monitoring and better cybersecurity arrangements to thwart coordinated hostile traffic during national celebrations.

Annual Cybersecurity Audits for Public Institutions

Haider Abbas also briefed members about Pakistan's Information Security Framework Rules. He said the rules were approved in 2023 and provide a way to assess institutions' cybersecurity strength through structured evaluations.

Under this framework, every institution will undergo an annual cybersecurity audit to ensure compliance with baseline defensive standards. The IT secretary also told the committee that each province had nominated departments for cybersecurity responsibilities to decentralize protection efforts.

The Role of the Pakistan Digital Authority and Data Risks

The meeting also covered broader concerns about data protection and digital infrastructure. The Director General of the Pakistan Digital Authority said digital infrastructure carries significant data-related risks in an increasingly interconnected global economy.

He stressed the importance of establishing a dedicated data regulator to oversee compliance across both public and private sectors. He also highlighted the need for proper AI supervision as Pakistan expands its digital infrastructure and adopts advanced computing technologies.

Federal Regulation Standards and Government Vision

Federal IT Minister Shaza Fatima Khawaja explained the regulator's role in the digital ecosystem. She said regulators do not directly handle an organisation's operations or policymaking.

She added that data-related matters would follow standards issued by the Pakistan Digital Authority. The authority was established under Prime Minister Shehbaz Sharif's vision of Digital Pakistan to modernize the state machinery.

Safeguarding Personal Information and Citizen Data

During the meeting, MNA Musa Gilani raised concerns about the security of citizens' personal information. He said several weaknesses still exist in Pakistan's data protection systems, leaving ordinary citizens vulnerable to identity theft and database leaks.

MNA Musa Gilani argued that further measures were needed to protect sensitive information from malicious entities. He also stressed that Pakistani citizens' data should remain within the country to prevent unauthorized foreign access.

Legislative Response and Digital Strategy Commission

He expressed hope that the IT minister would consider these concerns during upcoming policy revisions. The committee chairman welcomed the suggestions and said they would be considered by the relevant parliamentary subcommittees.

The chairman also appreciated the Pakistan Digital Authority's progress. He noted that the authority had started its work around a year earlier.

The meeting also discussed a proposed national commission for digital strategy. The prime minister heads the commission, which aims to ensure provincial implementation of approved digital policies across all administrative tiers.