Media Statement On Recent Reported Cyber Incidents

The Cyber Security Agency of Singapore (CSA) urges all organisations to take immediate steps to strengthen their cyber defences, as cyber threat actors increasingly exploit exposed vulnerabilities and poorly secured systems.  

2. Cyberattacks are increasingly opportunistic. Threat actors actively scan the Internet for vulnerable systems, and organisations can become victims even if they are not specifically targeted. The growing use of Artificial Intelligence by threat actors could further accelerate the discovery and exploitation of vulnerabilities, reducing the time organisations have to secure their systems.  

3. CSA has been closely monitoring these developments. Since September, the average monthly number of reported cyber incidents has been three times the January–August average. These incidents do not appear to be part of coordinated campaigns targeting Singapore but reflect a broader global trend of opportunistic attacks. Some incidents have also involved compromised third-party suppliers, underscoring the importance of managing supply-chain risks. 

4. All organisations, regardless of size or sector, should take steps now to protect themselves. In particular, CSA urges organisations to prioritise securing internet-facing systems, promptly patching known vulnerabilities, implementing multi-factor authentication, and monitoring for suspicious activities. Organisations should also ensure that their business continuity plans are ready to be activated in the event of a cyber incident. 

5. CSA has briefed all Critical Information Infrastructure sectors and is working closely with CII Owners to strengthen their cyber defences. CSA has also engaged key Trade Associations and Chambers to help businesses understand the evolving threats and take appropriate preventive measures.  

6. Organisations that encounter cyber incidents can lodge a report with CSA’s SingCERT at https://www.csa.gov.sg/resources/singcert/cyber-aid/ (opens in new tab) or contact the Cyber Incident Helpline at 6890 9555 for initial incident triage, advisory support and referrals to relevant service providers and resources. 

7. Organisations are also encouraged to tap on CSA’s CISO-as-a-Service programme to engage professional consultants to develop tailored cybersecurity plans, with up to 70% co-funding available to eligible SMEs. More information is available at https://www.csa.gov.sg/our-programmes/support-for-enterprises/sg-cyber-safe-programme/cybersecurity-certification-for-organisations/ciso-as-a-service-to-develop-cybersecurity-health-plan/ (opens in new tab).