Portugal's CNCS rolls out MCiber registration platform and alerts on phishing scams

Following the adoption of Regulation No. 756/2026, Portugal's National Cybersecurity Center (CNCS) has launched the MCiber platform. The system is mandatory for essential, important and public entities to register, appoint a cybersecurity officer and a permanent contact point, submit annual reports, list publicly accessible assets and notify incidents. Registration is required by the CNCS, the National Communications Authority (ANACOM) and other national cybersecurity bodies.

The CNCS also warned of a new phishing campaign that uses its name to distribute malware. Emails claim a critical vulnerability that must be fixed by downloading an attached file, which instead installs remote‑access malware. The agency urged recipients not to click links or download files, to verify sender authenticity, and to report suspicious messages to CERT PT via cert@cert.pt or the MCiber platform.