\n<\/p>\n
SINGAPORE – The local authorities have developed and deployed in-house artificial intelligence tools to better secure some 2,000 government systems under expanded cyber security efforts<\/span><\/a>.<\/p>\n This proactive posture – shifting from perimeter defense to active threat hunting – comes in the wake of an attack on the country\u2019s four major telcos <\/span><\/a>by state-sponsored cyberespionage group UNC3886.<\/span><\/a><\/p>\n The attack was first made public in July 2025. It could have disrupted telecommunications and internet services had the attackers penetrated further, and threatened national security.<\/p>\n In her first interview since taking over as chief executive of the Cyber Security Agency of Singapore (CSA) in July 2026, Gwenda Fong told The Straits Times that one of the key learning points from the incident is that defences need to go beyond keeping attackers out.<\/p>\n This is because advanced persistent threat actors (APTs) like UNC3886 pursue specific targets.<\/p>\n \u201cAPTs are driven by state-backed objectives and you are their target,\u201d said Fong, adding that focusing on threat prevention will not be enough.<\/p>\n Instead, one must now assume that attackers are already inside an operator\u2019s network, and focus on hunting them down before they wreak further havoc.<\/p>\n \u201cYou also have to assume that the most well-resourced and qualified attackers will find a way in at some point,\u201d added Fong, in the ST interview on Sept 3.<\/p>\n Once inside, however, attackers still have to move through the network in search of sensitive systems and data, giving defenders opportunities to detect them through unusual activity.<\/p>\n \u201cYou need to monitor the internal traffic. You need to detect anomalous traffic behaviour. You need to constantly do threat hunting,\u201d said Fong.<\/p>\n Developed by the Government Technology Agency of Singapore (GovTech), the new AI tools can take on some of this work.<\/p>\n One AI-powered tool conducts automated penetration testing on about 2,000 government systems, some of which contain citizen data and transactions. Automated penetration testing uses software to simulate cyber attacks and identify vulnerabilities that hackers can exploit.<\/p>\n The second AI tool scans the source code of government applications and systems for security weaknesses, allowing agencies to plug the gaps before hackers exploit them.<\/p>\n CSA and GovTech did not reveal which agencies have deployed the AI tools. There are also plans to expand their use in other critical information infrastructure sectors (CII).<\/p>\n The 11 CII sectors in Singapore are government, aviation, healthcare, land transport, maritime, media, security and emergency services, water, banking and finance, energy, and info-communications.<\/p>\n \u201cThis work is still at the evaluation stage and involves considering operational requirements, effectiveness and sector-specific needs,\u201d said CSA and GovTech, declining to provide details.<\/p>\n Post-UNC3886, CSA has also started regularly scanning all the Internet-facing systems of CII operators to identify potential entry points for attackers such as unpatched software or weak configurations, so CII operators can fix them before they are exploited.<\/p>\n \u201cIt is akin to walking along the common corridor of your HDB flat to see whether your doors and windows are open. We don\u2019t do any active probing, it\u2019s just an external scan to what are the open points of entry,\u201d said Fong.<\/p>\n The moves build on previously-announced efforts to strengthen Singapore\u2019s cyber defences, including rolling out proprietary threat detection tools<\/span><\/a> developed by a technical agency under the Ministry of Defence to all CII operators, and sharing classified threat intelligence with them.<\/p>\n CSA is also looking to tighten the security of supply chains tied to CII operators, as an attack on a vendor could compromise the data or disrupt services down the chain.<\/p>\n \u201cThere is a huge swathe of businesses that fall outside the sectors regulated under the Cybersecurity Act, but they are still part of the wider ecosystem we need to secure,\u201d said Fong.<\/p>\n She said that CSA is looking to require some CII operators\u2019 vendors and suppliers to obtain the Cyber Essentials or Cyber Trust mark certifications, potentially as early as 2027.<\/p>\n Launched in March 2022, the two certifications are currently voluntary. Cyber Essentials sets out the baseline cyber security measures for organisations, while the Cyber Trust mark provides five tiers of certification based on the risk profile of organisations and their size.<\/p>\n \u201cIt\u2019s not satisfactory just to have it purely voluntary because uptake is extremely slow,\u201d said Fong.<\/p>\n As of August 2026, only 874 Cyber Essentials and 346 Cyber Trust mark certifications were issued.<\/p>\n Fong said these moves come as cyber security evolves from a largely technical concern into a strategic discipline<\/span><\/a> with implications for national security, the digital economy and public trust.<\/p>\n She attributed the shift to three developments: the use of cyber operations as an instrument of strategic competition, the growing influence of geopolitics over access to technologies such as advanced chips and frontier AI models, and society\u2019s increasing reliance on digital infrastructure.<\/p>\n Suspected APT activity in Singapore quadrupled between 2021 and 2024, according to CSA\u2019s Singapore Cyber Landscape 2024 report. Fong expects the upward trend to continue as attackers gain access to AI tools.<\/p>\n At the same time, disruptions to digital systems now have wider consequences because they underpin almost every aspect of work and daily life, she said.<\/p>\n \u201cThese have fundamentally changed the nature of cyber security,\u201d said Fong. \u201cIt is a much more strategic discipline, and it is fundamentally about protecting trust in our digital infrastructure.\u201d<\/p>\n<\/div>\n SINGAPORE – The local authorities have developed and deployed in-house artificial intelligence tools to better secure some 2,000 government systems under expanded cyber security efforts….<\/p>\n","protected":false},"author":1,"featured_media":88217,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[2611],"tags":[],"class_list":["post-88216","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-buzz-headlines","wpcat-2611-id"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/88216","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=88216"}],"version-history":[{"count":0,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/88216\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/media\/88217"}],"wp:attachment":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=88216"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=88216"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=88216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
\n
Read Full Article At Source <\/a>
\n