Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.
Cyber Security Agency of Singapore

Alerts

Timely information about security issues, vulnerabilities, and exploits.

809 items

21 October 2026

Critical Vulnerabilities in PHP (PHP2Shell)

Attackers can exploit multiple critical vulnerabilities in PHP to achieve unauthenticated remote code execution. Patch immediately.

Alerts

21 October 2026

Critical Vulnerabilities in F5 NGINX Products

Attackers can exploit critical vulnerabilities in F5 NGINX products to perform remote code execution or cause denial-of-service (DoS) conditions. Patch immediately.

Alerts

20 October 2026

Advantech ADAM-3600 EdgeLink – Multiple Vulnerabilities including Remote Code Execution, Authentication Bypass, and Sensitive Data Exfiltration

Multiple vulnerabilities have been discovered in Advantech's ADAM-3600 EdgeLink remote terminal unit product. Advantech has released a security update to address these vulnerabilities. Special thanks to Advantech for coordinating the disclosure of these vulnerabilities with CSA.

Alerts

20 October 2026

Critical Vulnerabilities in Next.js

Attackers can exploit critical vulnerabilities in Next.js to perform remote code execution. Patch immediately.

Alerts

20 October 2026

Active Exploitation of Vulnerability in Ivanti Connect Secure

Attackers are exploiting a high-severity vulnerability in Ivanti Connect Secure to execute arbitrary commands. Patch immediately.

Alerts

19 October 2026

Critical Vulnerabilities in Juniper Devices

Attackers can exploit critical vulnerabilities in Juniper devices to execute arbitrary code, cause a denial-of-service condition, or gain root-level privileges. Patch immediately.

Alerts

16 October 2026

Multiple Vulnerabilities in MariaDB Server

Attackers can exploit high-severity vulnerabilities in MariaDB Server to execute arbitrary code on the affected system. Patch promptly.

Alerts

16 October 2026

Critical Vulnerabilities in Splunk Enterprise

Attackers can exploit critical vulnerabilities in Splunk Enterprise to escalate privileges and execute arbitrary code. Patch immediately.

Alerts

16 October 2026

Active Exploitation of Vulnerability in Palo Alto Networks Products

Attackers are exploiting a high-severity vulnerability in Palo Alto Networks PAN-OS to execute arbitrary code with root privileges. Patch immediately.

Alerts

14 October 2026

October 2026 Monthly Patch

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

Monthly Patch