Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore

Alerts & Advisories

Provides alerts and advisories on emerging cyber threats, vulnerabilities, and preventive measures to help individuals and organisations stay secure online.

1256 items

14 October 2026

October 2026 Monthly Patch

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

14 October 2026

Critical Vulnerability in GitLab Community Edition and Enterprise Edition

Attackers can exploit a critical vulnerability in GitLab Community Edition and Enterprise Edition to perform remote code execution without authentication. Patch immediately.

14 October 2026

Security Bulletin 14 Oct 2026 [PDF, 2MB]

(opens in new tab)

14 October 2026

Advisory on Quantum-Safe Migration for Organisations

The quantum threat could undermine the cryptography that protects digital information today. This advisory provides organisations with key milestones and practical steps to assess their quantum risk, develop a migration plan and prepare their systems for quantum-safe cryptography.

12 October 2026

Critical Vulnerability in Citrix NetScaler ADC and NetScaler Gateway

Attackers can exploit a critical vulnerability in Citrix NetScaler ADC and NetScaler Gateway to perform remote code execution or cause a denial of service on the affected system. Patch immediately.

12 October 2026

Critical Vulnerabilities in HPE Networking ClearPass Policy Manager

Attackers can exploit critical vulnerabilities in HPE Networking ClearPass Policy Manager to bypass authentication, execute arbitrary code, or gain full administrative access to the affected system. Patch immediately.

9 October 2026

Critical Vulnerability in Veeam Backup & Replication

Attackers with the Backup Viewer role can exploit a critical vulnerability in Veeam Backup & Replication to execute arbitrary code as SYSTEM. Patch immediately.

8 October 2026

Critical Vulnerability in SonicWall SMA1000 Series

SonicWall has released security updates to address a critical vulnerability in the SMA1000 series appliances. Users and administrators of affected products are advised to update to the latest version immediately.

8 October 2026

SQLView KRIS – Stored Cross-Site Scripting Vulnerability in Workflow Template Feature

A vulnerability has been discovered in the records management application "SQLView KRIS". The product owner has rolled out a fix for the reported vulnerability. Special thanks to the researcher and SQLView for coordinating through CSA's Responsible Vulnerability Disclosure Policy.

7 October 2026

Creative Sound Blaster Katana – Multiple Vulnerabilities in Firmware Verification and Bluetooth Authentication

Multiple vulnerabilities have been discovered in Creative Sound Blaster Katana products. Creative Labs has released firmware updates to address these vulnerabilities. Special thanks to the informer and Creative Labs for coordinating through CSA's Responsible Vulnerability Disclosure Policy.