Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Cyber Security Agency of Singapore
  1. Home
  2. Alerts & Advisories

Alerts & Advisories

Provides alerts and advisories on emerging cyber threats, vulnerabilities, and preventive measures to help individuals and organisations stay secure online.

974 articles

9 July 2025

July 2025 Monthly Patch

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

Monthly Patch

9 July 2025

Security Bulletin 09 July 2025 [PDF, 638KB]

Bulletin

8 July 2025

Choosing the Right Authentication Methods

In this age of rapid digitalisation, attackers are actively targeting weak or misconfigured authentication systems.

Advisory

4 July 2025

Ongoing Campaign by SCATTERED SPIDER

SCATTERED SPIDER is a financially-motivated eCrime adversary, targeting the insurance and retail industries. As of June 2025, the group has expanded its operations to the aviation sector.

Alerts

2 July 2025

Security Bulletin 02 JUL 2025 [PDF, 654KB]

Bulletins

1 July 2025

Active Exploitation of Zero-Day Vulnerability in Google Chrome

Google has released security updates to address a zero-day vulnerability in its Chrome browser. Users and administrators of affected products are advised to update to the latest versions immediately.

Alerts

30 June 2025

Active Exploitation of Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

Citrix has released security updates addressing multiple critical vulnerabilities in their NetScaler ADC and NetScaler Gateway. Users and administrators of affected products are advised to update to the latest versions immediately.

Alerts

30 June 2025

High-Severity Vulnerability in Notepad++

Notepad++ has released security updates addressing a vulnerability affecting their product. Users and administrators of affected products are advised to update to the latest version.

Alerts

26 June 2025

Critical Vulnerabilities in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC)

Cisco has released security updates addressing multiple critical vulnerabilities in their ISE and ISE-PIC. Users and administrators of affected products are advised to update to the latest versions.

Alerts

26 June 2025

Joint Advisory Against Using NRIC Numbers For Authentication

The Personal Data Protection Commission (PDPC) and Cyber Security Agency of Singapore (CSA) have issued a joint advisory to advise organisations against using NRIC numbers for authentication.

Advisory