Key facts
- Singapore is deploying AI tools for automated penetration testing and source code scanning of government systems.
- The move to AI-driven cyber defense follows a state-sponsored cyberespionage attack on the nation's telcos in July 2025.
- AI is being used by threat actors to conduct attacks with greater speed and sophistication.
- Phishing attempts in Singapore decreased by 21% in 2025 compared to 2024.
- The number of infected infrastructure detected in Singapore increased by 142% in 2025.
Singapore is enhancing its cyber defenses by adopting artificial intelligence tools, a move that comes as the nation also seeks greater transparency from technology firms regarding security breaches. This dual approach aims to harness AI's capabilities while mitigating the risks it introduces.
The Cyber Security Agency of Singapore (CSA) has published its Singapore Cyber Landscape 2025/2026 report, detailing initiatives to bolster cyber resilience against increasingly sophisticated, AI-enabled threats. The report acknowledges that threat actors are leveraging AI to conduct attacks with greater speed and scale, while also recognizing AI's potential to improve defensive capabilities.
In response to evolving threats, including a state-sponsored cyberespionage attack on the country's major telcos in July 2025 by group UNC3886, Singapore has developed and deployed in-house AI tools. These tools perform automated penetration testing on approximately 2,000 government systems and scan source code for vulnerabilities. The strategy has shifted from perimeter defense to active threat hunting, assuming that attackers may already have breached internal networks.