Threats & Vulnerabilities

The UNC3886 Singapore campaign became a significant cybersecurity concern after Singapore disclosed in July 2025 that the advanced persistent threat actor was attacking critical infrastructure. Later official details showed that Singapore’s telecommunications sector was targeted and that UNC3886 used a zero-day exploit to bypass a perimeter firewall. This article outlines seven practical lessons for critical-infrastructure […]

In a recent and highly concerning incident, the Accounting and Corporate Regulatory Authority (ACRA) faced backlash over a privacy lapse involving its BizFile+ portal. This portal allowed users to search for National Registration Identity Card (NRIC) numbers of citizens, raising serious privacy concerns. The issue was highlighted after veteran journalist Bertha Henson shared her discovery

In the ever-evolving landscape of cyber threats, one of the most dangerous and elusive forms of attack is the Advanced Persistent Threat (APT). Unlike traditional cyberattacks, which are often opportunistic and quick, APTs are highly targeted, long-term campaigns designed to infiltrate networks and steal sensitive data over extended periods of time. This makes them incredibly