Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore

Alerts & Advisories

Provides alerts and advisories on emerging cyber threats, vulnerabilities, and preventive measures to help individuals and organisations stay secure online.

1259 items

16 October 2026

Multiple Vulnerabilities in MariaDB Server

Attackers can exploit high-severity vulnerabilities in MariaDB Server to execute arbitrary code on the affected system. Patch promptly.

16 October 2026

Critical Vulnerabilities in Splunk Enterprise

Attackers can exploit critical vulnerabilities in Splunk Enterprise to escalate privileges and execute arbitrary code. Patch immediately.

16 October 2026

Active Exploitation of Vulnerability in Palo Alto Networks Products

Attackers are exploiting a high-severity vulnerability in Palo Alto Networks PAN-OS to execute arbitrary code with root privileges. Patch immediately.

14 October 2026

October 2026 Monthly Patch

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

14 October 2026

Critical Vulnerability in GitLab Community Edition and Enterprise Edition

Attackers can exploit a critical vulnerability in GitLab Community Edition and Enterprise Edition to perform remote code execution without authentication. Patch immediately.

14 October 2026

Security Bulletin 14 Oct 2026 [PDF, 2MB]

(opens in new tab)

14 October 2026

Advisory on Quantum-Safe Migration for Organisations

The quantum threat could undermine the cryptography that protects digital information today. This advisory provides organisations with key milestones and practical steps to assess their quantum risk, develop a migration plan and prepare their systems for quantum-safe cryptography.

12 October 2026

Critical Vulnerability in Citrix NetScaler ADC and NetScaler Gateway

Attackers can exploit a critical vulnerability in Citrix NetScaler ADC and NetScaler Gateway to perform remote code execution or cause a denial of service on the affected system. Patch immediately.

12 October 2026

Critical Vulnerabilities in HPE Networking ClearPass Policy Manager

Attackers can exploit critical vulnerabilities in HPE Networking ClearPass Policy Manager to bypass authentication, execute arbitrary code, or gain full administrative access to the affected system. Patch immediately.

9 October 2026

Critical Vulnerability in Veeam Backup & Replication

Attackers with the Backup Viewer role can exploit a critical vulnerability in Veeam Backup & Replication to execute arbitrary code as SYSTEM. Patch immediately.