Keeping our cyberspace safe & secure
CSA's core mission is to keep Singapore's cyberspace safe and secure, to underpin our National Security, power a Digital Economy, and protect our Digital Way of Life.
Alerts & Advisories
Scammers Impersonating CSA and SingCERT Officers
The Singapore Cyber Emergency Response Team (SingCERT) continues to receive reports of scammers impersonating CSA and SingCERT officers. Members of the public are advised to stay vigilant and not follow any instructions given by these scammers.
Ongoing npm Supply Chain Attack Affecting Keyv and Related Packages ("Shai-Hulud" Worm)
Security researchers have identified an active software supply chain attack involving malicious versions of Keyv and related npm packages. The Shai-Hulud malware steals developer credentials and spreads by compromising additional packages. Organisations using Node.js should immediately review their dependencies and treat credentials on affected systems as potentially compromised.
Active exploitation of Critical Vulnerability in IBM Langflow OSS
Attackers are actively exploiting a critical vulnerability in IBM Langflow OSS to achieve unauthenticated remote code execution (RCE). Users and administrators of affected products are advised to apply the latest security updates immediately.
News & Events
Be Cyber Safe Minecraft Builders Bootcamp 2026
The Be Cyber Safe Minecraft Builders Bootcamp 2026 is a one-day cybersecurity adventure in the Minecraft world. Students will start the journey as Cyber Learners and emerge as Cyber Heroes by the end of the bootcamp. This bootcamp is complimentary and prior knowledge in Minecraft is not required.
Be Cyber Safe Minecraft Defenders Bootcamp 2026
The Be Cyber Safe Minecraft Defenders Bootcamp 2026 is a one-day cybersecurity adventure in the Minecraft world. Students will step into the Cyber Kingdom, a world under siege from cyber threats, and take on specialised cybersecurity roles to design and defend it. This bootcamp is complimentary and prior knowledge in Minecraft is not required.
Closing Note to the Consultation on the Licensing Framework for Cybersecurity Service Providers
CSA concludes public consultation on cybersecurity licensing framework updates. Key changes include mandatory certification requirements, extended 5-year licence validity, and streamlined notification processes. Implementation timeline provides adequate transition period for service providers to comply with new standards.
Resources
Report a Cybersecurity Incident
SingCERT encourages reporting incidents as it enables us to understand the scope and nature of cyber incidents in Singapore.
Subscribe for Updates
Get timely information about security issues, vulnerabilities, exploits and high-impact cybersecurity activity affecting Singapore from SingCERT.
