The National Cyber Emergency Response Team (CERT) has issued a warning to public and private sector organisations in Pakistan as they face a new threat of potential cyberattacks. These threats are reportedly arising from third-party vendors and suppliers.
The National CERT has directed them to make sure that robust cybersecurity measures are in place.
What are the risks?
According to the National CERT, business partners who have weak security protocols can jeopardise an organization’s digital infrastructure.
Additionally, letting vendors access the internal systems, data, and security credentials can increase the risk of cyberattacks.
There is also a risk that sensitive information could be exposed through these external service providers.
What should you do?
The National CERT recommends that organisations assess the security arrangements of any vendor or supplier before engaging their services.
Access granted to third-party vendors should be strictly limited to what is necessary, and their activities should be monitored regularly to mitigate cyber threats.
National CERT warns regarding sharing real-time phone locations
Previously, the National CERT warned that sharing real-time phone locations online could expose users to cyber threats. This can include stalking, unauthorised tracking and privacy breaches.
The advisory had been issued in collaboration with the National Telecommunication Corporation (NTC) as part of Cybersecurity Awareness Month 2026.
It urged internet users to review their privacy settings and disable location sharing when it is not needed.
According to it, location data can reveal far more than a person’s position on a map.
It can also provide insights into daily routines, personal habits and movements. This can then eventually lead to malicious actors identifying where someone lives, works and frequently visits.
NCCIA issues new guidelines
Recently, the National Cyber Crime Investigation Agency (NCCIA) issued guidelines for citizens who want to file cybercrime cases.
The NCCIA said that citizens should submit relevant evidence when reporting a cybercrime.
For cases linked to social media platforms such as WhatsApp, Facebook and X, complainants should provide screenshots of the alleged crime.
The screenshots can help the agency understand the issue and investigate the complaint.
