Advisories

Information on high-impact cybersecurity activity affecting Singapore

Filter By:
Importance of Using Secure Multi-Factor Authentication Methods
As cyber-attacks become more prevalent and sophisticated, relying solely on passwords to secure users’ online accounts may no longer be sufficient.
Importance of Using Secure Multi-Factor Authentication Methods
Joint Advisory on Tech Support Scams
The Singapore Police Force (SPF) and CSA have issued a joint advisory to alert members of the public to a recurring tech support scam modus operandi, and what individuals can do to protect themselves against such scams.
Joint Advisory on Tech Support Scams
Technical Advisory on Secure API Development
As the gateway to data and systems, Application Programming Interfaces (APIs) pose an ongoing security concern. Here’s why and what you can do to make your API more secure.
Technical Advisory on Secure API Development
Joint Advisory on The Dangers Of Downloading Files From Unknown Sources to Mobile Devices
The Singapore Police Force (SPF) and CSA have issued a joint advisory to remind the public on the dangers of downloading files from unknown sources to mobile devices, and what you can do to protect yourself.
Joint Advisory on The Dangers Of Downloading Files From Unknown Sources to Mobile Devices
Protecting Yourself Against Telegram Scams and Securing your Telegram Account
There has been a rising number of local reports involving cybercriminals leveraging Telegram to trick users into sending their one-time password (OTP) or other confidential information or transferring money to the cybercriminals’ accounts.
Protecting Yourself Against Telegram Scams and Securing your Telegram Account
Joint Advisory on Scams Targeting Year-End Online Shopping and Festivities
The Singapore Police Force and CSA have issued a joint advisory to alert the public on scams targeting year-end online shopping and festivities.
Joint Advisory on Scams Targeting Year-End Online Shopping and Festivities
Protecting Yourself and Your Organisation from Data Breaches
A data breach, in relation to personal data, refers to any unauthorised access, collection, use, disclosure, copying, modification or disposal of personal data.
Protecting Yourself and Your Organisation from Data Breaches
Protecting Your Software from Malicious Third-party Dependencies
There have been reports of cybercriminals creating malicious counterfeits of legitimate dependencies by attempting to populate package manager and container repositories with malicious codes and images.
Protecting Your Software from Malicious Third-party Dependencies
Importance of Securing Your Application Programming Interface (API)
Application Programming Interfaces (APIs) are vital in today’s highly digitised world as they provide flexibility by simplifying software design, administration ...
Importance of Securing Your Application Programming Interface (API)
Joint Advisory on the Distribution of Ransomware "Deadbolt" Targeting QNAP NAS Devices
The Singapore Police Force and CSA have issued a joint advisory to alert the public on the distribution of ransomware "Deadbolt" targeting QNAP NAS devices.
Joint Advisory on the Distribution of Ransomware "Deadbolt" Targeting QNAP NAS Devices
[SingCERT] Advisory on Multiple Security Vulnerabilities Affecting D-Link DIR-800 Series Routers
On 8th and 12th September 2017, security researchers publicly disclosed details of multiple vulnerabilities affecting D-Link DIR-800 series of routers. ...
[SingCERT] Advisory on Multiple Security Vulnerabilities Affecting D-Link DIR-800 Series Routers
Importance of Proper Segregation and Management of Enterprise Data
There has been a rising number of reports involving enterprises falling victim to cyber incidents due to a lack of proper management of enterprise data and segregation of such data from employees' personal accounts.
Importance of Proper Segregation and Management of Enterprise Data
Strengthening Your Cybersecurity Posture Amidst Developments in the Russia-Ukraine Conflict
There have been warnings of increased cyber threats globally arising from the recent cyber-attacks on Ukraine and the developments in the Russia-Ukraine conflict.
Strengthening Your Cybersecurity Posture Amidst Developments in the Russia-Ukraine Conflict
Importance of Using Strong Passwords, and Ways to Safeguard Your Passwords and Accounts
Passwords provide the first line of defence against any unauthorised access to your devices and online accounts. They act as a form of authentication and restrict cybercriminals from having direct access to your accounts by preventing any possible misuse.
Importance of Using Strong Passwords, and Ways to Safeguard Your Passwords and Accounts
Protecting Your Website From Cyber-Attacks
Cyber-attacks against websites are perennial threats that any organisation with an online presence should guard against.
Protecting Your Website From Cyber-Attacks
Joint Advisory on Magniber Ransomware Distributed Through Fake Windows Operating System (OS) Updates
Singapore Police Force (SPF) and CSA have issued a joint advisory to alert the public on a Magniber ransomware variant which is reported to be distributed through websites offering pirated or cracked software such as fake Windows OS updates.
Joint Advisory on Magniber Ransomware Distributed Through Fake Windows Operating System (OS) Updates
Joint Advisory on Tech Support Scam
CSA and the Singapore Police Force (SPF) have issued a joint advisory to alert the public to a recurring modus operandi used by scammers to conduct technical support scams and the measures individuals can take to protect against such scams.
Joint Advisory on Tech Support Scam
Protect your Industrial Control Systems' Safety Instrumented Systems
This advisory provides some background information about ICS and SIS, as well as recommended measures that operators and owners of ICS systems can take to secure their SIS.
Protect your Industrial Control Systems' Safety Instrumented Systems
Protect your Organisation from Business Email Compromise
Business Email Compromise (BEC) is an email-based fraud technique that is designed to allow an attacker to gain unauthorised access to confidential information or extract money through fraudulent requests for payment or wire transfer.
Protect your Organisation from Business Email Compromise
Increased Malicious and Scam Activity Exploiting the Russia-Ukraine Conflict
As the conflict in Russia and Ukraine intensifies, there is a rising number of reports globally involving scammers taking advantage of the crisis to trick users into sending money or spread malicious payloads through the use of phishing emails. Users are advised to be extra vigilant during these times.
Increased Malicious and Scam Activity Exploiting the Russia-Ukraine Conflict

Report a Cybersecurity Incident

SingCERT encourages the reporting of cybersecurity incidents as it enables us to better understand the scope and nature of cyber incidents in Singapore. This will enable us to issue alerts or advisories on relevant threats, and assist a broader range of individuals and organisations.
Report Incident