Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore

Alerts

Timely information about security issues, vulnerabilities, and exploits.

771 items

28 August 2026

Active Exploitation of Vulnerabilities in Microsoft SharePoint

Attackers are exploiting multiple vulnerabilities in Microsoft SharePoint Server to bypass a security feature and run code over a network. Patch immediately.

Alerts

27 August 2026

Critical Vulnerability in Apache Tomcat

Attackers can exploit a critical vulnerability in Apache Tomcat to bypass security constraints and gain unauthorised access to protected resources. Patch immediately.

Alerts

26 August 2026

Active Exploitation of Vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In

Attackers are exploiting a critical vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In to access, change or delete critical data. Patch immediately.

Alerts

26 August 2026

Vulnerabilities in Privileged Access Management Application “Admin By Request”

Two vulnerabilities have been discovered in the privileged access management application “Admin By Request” (ABR). The product owner has rolled out fixes for both reported vulnerabilities. Special thanks to the researchers and ABR for coordinating through CSA's Responsible Vulnerability Disclosure Policy.

Alerts

21 August 2026

High-Severity Vulnerability in Zimbra Collaboration Suite

Attackers can exploit a high-severity vulnerability in Zimbra Collaboration Suite to achieve remote code execution. Patch immediately.

Alerts

20 August 2026

Multiple Vulnerabilities in Zoom Products

Attackers can exploit multiple vulnerabilities in Zoom products to perform remote code execution, denial of service or disclose sensitive information. Users and administrators of affected products are advised to apply the latest security updates promptly.

Alerts

18 August 2026

Multiple Vulnerabilities in HPE Aruba Networking Private 5G Core

Attackers can exploit multiple vulnerabilities in HPE Aruba Networking Private 5G Core affecting third-party components Traefik and Grafana to spoof identities and escalate privileges. Patch promptly.

Alerts

18 August 2026

High-Severity Vulnerability in Cisco Secure Firewall ASA and FTD

Attackers are exploiting a vulnerability in Cisco Secure Firewall ASA and FTD to cause the affected device to reload unexpectedly, resulting in a denial of service condition. Patch immediately.

Alerts

18 August 2026

Multiple Vulnerabilities in Fortinet FortiWeb, FortiClient Windows, FortiManager, and FortiManager Cloud

Attackers can exploit multiple vulnerabilities in Fortinet FortiWeb, FortiClient Windows, FortiManager, and FortiManager Cloud to bypass authentication, gain unauthorised access or execute arbitrary code. Patch promptly.

Alerts

18 August 2026

Multiple Vulnerabilities in SAP Products

Attackers can exploit multiple vulnerabilities in SAP products to execute arbitrary code, disclose sensitive information or crash affected systems. Patch immediately.

Alerts