Advisories
Information on high-impact cybersecurity activity affecting Singapore.
115 items
6 November 2026
Advisory on Cyberattacks Targeting Remotely Accessible Operational Technology Control Systems
Recent cyberattacks on refrigeration management systems highlight the risks of poorly secured remote access to Operational Technology (OT) systems, potentially causing operational disruptions and safety hazards. This advisory outlines key measures to strengthen OT security and mitigate similar threats.
Advisory
6 November 2026
Joint Advisory by the Cyber Security Agency of Singapore, Government Technology Agency of Singapore and Infocomm Media Development Authority
The Cyber Security Agency of Singapore, Government Technology Agency of Singapore and Infocomm Media Development Authority have issued a joint advisory on the safe and secure use of personal AI agents.
Advisory
28 October 2026
Advisory on Malware Campaigns Spreading Through WhatsApp
SingCERT has received multiple reports of malware campaigns involving malicious files being distributed through compromised WhatsApp accounts. Stay vigilant and avoid opening unexpected attachments, even from known contacts.
Advisories
14 October 2026
Advisory on Quantum-Safe Migration for Organisations
The quantum threat could undermine the cryptography that protects digital information today. This advisory provides organisations with key milestones and practical steps to assess their quantum risk, develop a migration plan and prepare their systems for quantum-safe cryptography.
Advisories
30 September 2026
Advisory on CARBONATO Botnet Campaign Targeting Exposed Docker Daemons
Security researchers have identified a botnet campaign known as CARBONATO targeting Docker hosts with unauthenticated Docker Remote APIs exposed to the Internet. Organisations operating Docker environments are advised to review their configurations and assess potentially exposed systems for signs of compromise.
Advisory
26 August 2026
Understanding Passwordless Authentication
Passwords have been the primary method of authentication for decades, but they remain a common target for threat actors. It's time to rethink how we verify identities online.
Advisories
14 August 2026
SPF-CSA Joint Advisory On Cryptocurrency Scams Involving Fake Job Offers And Compromised Software Systems
The Singapore Police Force (SPF) and Cyber Security Agency of Singapore (CSA) would like to alert members of the public and businesses of a cryptocurrency-related scam involving fake job offers and the compromise of software systems.
Advisory
6 August 2026
Ongoing npm Supply Chain Attack Affecting Keyv and Related Packages ("Shai-Hulud" Worm)
Security researchers have identified an active software supply chain attack involving malicious versions of Keyv and related npm packages. The Shai-Hulud malware steals developer credentials and spreads by compromising additional packages. Organisations using Node.js should immediately review their dependencies and treat credentials on affected systems as potentially compromised.
Advisory
28 July 2026
Joint Advisory by the Cyber Security Agency of Singapore and Infocomm Media Development Authority
The Cyber Security Agency of Singapore and Infocomm Media Development Authority have issued a joint advisory to guide individuals on the safe and secure use of generative AI tools.
Advisory
22 June 2026
Advisory on Credential Compromise of FortiGate Devices ("FortiBleed")
A threat actor has leaked credentials of over 70,000 FortiGate devices worldwide, making them vulnerable to network intrusions. Check access control configurations of FortiGate devices immediately.
Advisory