Cyber Security Agency of Singapore - CSA

A threat actor has leaked credentials of over 70,000 FortiGate devices worldwide, making them vulnerable to network intrusions. Check access control configurations of FortiGate devices immediately.

🔗: https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-007/

Happy Father's Day to all the wonderful dads at ! 💙

We asked our little ones to draw what they think Dad gets up to at work. The results? Awwww. 😄

From protecting Singapore's cyberspace to spreading the word on cyber safety — our kids clearly know Dad is on a mission, saving the day (and night) at home.

To every CSA dad — thank you for everything you do to safeguard our digital future.🫡

CSA participated in the 16th Singapore-US Joint Cyber Security Working Group (JCSWG), a longstanding platform for Singapore, the US and industry to share perspectives on cybersecurity issues and strengthen public-private collaboration.

This year’s session was co-organised by the Business Software Alliance (BSA) with support from the U.S. Embassy and AWS. CSA’s Assistant Chief Executive (Policy and Corporate Development), Mr Ong Kok Wee, delivered the opening and closing remarks, and joined the panel discussion on key issues shaping the cybersecurity landscape - evolving AI-driven threat environment, role of AI and cloud technologies in strengthening cyber resilience, and the implications of emerging technologies for long-term security.

As technology continues to evolve rapidly, close collaboration between governments and industry remains essential to building a secure, resilient, and trusted digital future.

Attackers can exploit multiple vulnerabilities in Cisco Identity Services Engine to execute arbitrary commands on the underlying operating system and disclose sensitive information. Patch immediately.
Read the alert: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-081/

Attackers can exploit high-severity vulnerabilities in NGINX to cause worker process crashes and, under certain conditions, achieve remote code ex*****on. Patch immediately. Read the alert: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-080/

Attackers can exploit multiple vulnerabilities in Oracle Solaris to compromise affected systems, gain unauthorised access to critical data and cause denial of service. Patch immediately. Read the alert: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-079/

Attackers can exploit critical vulnerabilities in MariaDB Community Server to execute arbitrary shell commands on the affected system. Patch immediately. Read the alert: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-078/

Not everything online is as real as it looks anymore.

As AI-generated content becomes more advanced, deepfakes are making it easier for scammers to imitate people, create urgency, and manipulate trust.

That's why it's important to pause and verify before taking action. A few extra seconds could make all the difference.

Swipe through to learn how to better spot the signs of a deepfake and protect yourself online.

Read our advisory: https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2024-006/

Attackers are exploiting a vulnerability in Cisco Catalyst SD-WAN Manager to overwrite files on the underlying filesystem and escalate privileges to root. Patch immediately. Read the alert: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-077/