SINGAPORE — Singapore’s cyber agency says reported incidents have averaged three times the January-August level since September, pointing to a broader global pattern of opportunistic attacks that can affect organizations without specific targeting.
The Cyber Security Agency of Singapore (CSA) gave the comparison in a Nov. 13 statement but did not publish absolute monthly counts. It said the incidents did not appear to be part of a coordinated campaign aimed at Singapore. Instead, the agency described them as consistent with a wider global trend.
CSA said attackers scan internet-connected systems for weaknesses, so organizations may be affected even when they have not been selected as targets. Some incidents also involved compromised third-party suppliers, the agency said.
In a related advisory, CSA said preliminary observations pointed to common security gaps: phishing, supplier vulnerabilities, exposed or unpatched systems, weak or reused passwords, and missing multifactor authentication. It warned that artificial intelligence could help attackers find and exploit vulnerabilities faster, but did not link AI to any specific recent incident.
Separately, Channel NewsAsia (CNA) reported that 10 breaches involving compromised information had been reported in Singapore over the past two months, six of which were healthcare-related. CNA also reported that the Personal Data Protection Commission’s preliminary indications about significant breaches reported in the past week pointed to opportunistic attacks exploiting common IT weaknesses. The commission saw no clear links among the breaches, CNA reported, and said some incidents were related to global data breaches.
CSA recommended that organizations review systems accessible from the internet, apply security updates, enable multifactor authentication, monitor for suspicious activity and keep business continuity plans ready. It warned that successful attacks could disrupt operations and cause reputational damage and financial losses. The agency said it had briefed critical information infrastructure sectors and was working with their owners and trade groups to strengthen defenses.
