Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Malvertising campaign targets Android users with advanced crypto-steal...
How are people in 15 countries leveraging AI for travel planning?
Insider threats cited alongside external attacks in terms of severity:...
How are people in 15 countries leveraging AI for travel planning?
North America financial institutions lead surge in financial regulator...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Resilience the true benchmark for smart infrastructure

      Resilience the true benchmark for smart infrastructure

      Wednesday, August 27, 2025, 8:21 PM Asia/Singapore | Features, IoT Security
    • Featured

      Deepfake a crisis of trust, not just technology

      Deepfake a crisis of trust, not just technology

      Tuesday, August 19, 2025, 10:06 AM Asia/Singapore | Features
    • Featured

      When talking sense into AI power mongers fails, talk $$$: A message from AI

      When talking sense into AI power mongers fails, talk $$$: A message from AI

      Thursday, August 14, 2025, 12:26 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

FeaturesOpinions

Experts weigh in on Singapore’s response to UNC3886

By CybersecAsia editors | Friday, August 8, 2025, 10:45 PM Asia/Singapore

Experts weigh in on Singapore’s response to UNC3886

Just days away from its 60th National Day celebrations, Singapore raised its cyberthreat alert level. Cybersecurity experts share their perspectives with CybersecAsia.

At the Operational Technology Cybersecurity Expert Panel (OTCEP) Forum on 29 July 2025, Singapore’s Minister for Digital Development and Information Josephine Teo announced new regulations, which take effect later this year, as Singapore raised its cyberthreat alert level in the face of ongoing UNC3886 attacks on the nation’s critical infrastructure.

After Coordinating Minister for National Security K Shanmugam said the nation is actively dealing with a highly sophisticated threat actor attacking its critical infrastructure, Singapore’s Cyber Security Agency (CSA) announced in a statement that it was leading the investigations, and is working closely with relevant agencies and partners to support affected organizations.

“In addition, we are monitoring all critical sectors and sharing threat intelligence so that they can take preventive measures,” the statement said. The new regulations to come into force include requiring all critical information infrastructure (CII) owners to report their advanced persistent threat (APT) incidents to CSA.

“Given the UNC3886 attack and heightened APT activity, it should not come as a surprise to anyone that we are currently in a heightened state of alert,” said Minister Teo.

Cybersecurity experts in the region weigh in on the developments….

Paul Wilcox, VP, APJ, Infoblox:

UNC3886 is a good example of how today’s threat actors are playing the long game — embedding themselves in critical infrastructure to quietly disrupt essential services, supply chains and everyday life.

With Singapore now requiring all CII owners to report their APT incidents, there’s a growing recognition that these threats are already happening. But, detection after the fact is too late. Enterprises need to stay one step ahead with preemptive tools that surface threats before damage is done.

APT groups often slip past traditional tools, which is why broader visibility is needed. DNS, as the layer that underpins every internet connection, is often an overlooked but invaluable tool in pre-emptively stopping attacks. With the right defences, 82% of domain-based threats can be stopped before they reach the network.

DNS is often a blind spot, but it doesn’t have to be. Early detection gives security teams a head start, before attackers gain ground.

Ian Farquhar, Security CTO, Gigamon:

The recent UNC3886 infiltration into Singapore’s critical infrastructure is a stark reminder that even the most secure nations are targets for today’s sophisticated threat actors.

These adversaries don’t smash through the front door; they operate with stealth, moving laterally within networks and hiding their activity in encrypted traffic that most security tools cannot inspect.

This is precisely why deep observability is no longer optional. Organizations must illuminate every corner of their digital environment, especially encrypted and lateral traffic where attackers often hide. Without it, defenders are effectively flying blind.

Ultimately, achieving pervasive visibility into all data in motion is the only way to counter these elusive threats. In an age where APTs evolve faster than perimeter defenses, it’s not just about building taller walls; it’s about shedding light on the entire battlefield. Only then can we meaningfully accelerate detection and outpace the adversary.

David Ng, Managing Director, Singapore, Philippines & Indonesia, Trend Micro:

The rise of APTs like UNC3886 and Earth Kurma highlights a critical reality for Southeast Asia: passive, “wait-for-a-breach” security no longer works. Singapore’s recent regulations also emphasize the need for a more proactive approach to cybersecurity.

Enterprises need to empower their security teams to identify vulnerabilities, prioritize threats by business impact, and implement mitigation strategies before attacks occur. Cyber Risk Exposure Management (CREM) enables this shift by going beyond simply visualizing risk.

When combined with a unified cybersecurity platform designed for real-time risk visualization, management, and automation, organizations gain enhanced visibility while streamlining response efforts to more effectively safeguard digital assets in today’s dynamic threat landscape.

For stealthy APTs, which often lurk undetected and move laterally through networks, CREM acts as an early warning system and risk-reduction engine. With a continuous and dynamic view of cyber exposure, it helps organizations stay ahead and ultimately build a more resilient cybersecurity posture.

Sanjay Yadave, Vice President & Managing Director, Greater Asia, Zscaler:

State-linked threat actors are stealthy and persistent, often bypassing traditional defenses and remaining undetected for long periods. Zscaler’s ThreatLabz recently uncovered two China-nexus campaigns that used legitimate websites and multi-stage infection chains to target vulnerable communities, illustrating how difficult it can be to identify and respond to such threats once they’ve taken hold.

Singapore’s new regulations are a necessary step toward improving national cyber readiness—given how advanced persistent threats operate, regulation and security must work hand in hand.

Timely reporting helps surface threats, but it only works if organizations have the tools to detect, contain, and neutralize them early. That means inspecting encrypted traffic at scale, identifying zero-day threats in real time, and limiting lateral movement through zero trust controls.

With threats evolving faster than ever, true resilience requires close collaboration between the public and private sectors — ensuring that policy, technology, and threat intelligence evolve together to stay ahead of increasingly sophisticated attacks.

Share:

PreviousUrgent mitigation urged for on-premises users of an endpoint security management console
NextCohesity Launches New Partner Program to Accelerate Partner Success

Related Posts

Did powerful botnets, geopolitical tensions increase DDoS attacks in Q3 2024?

Did powerful botnets, geopolitical tensions increase DDoS attacks in Q3 2024?

Monday, October 28, 2024

As SEA travel resumes, bots scour digital travel ads for fraudsters

As SEA travel resumes, bots scour digital travel ads for fraudsters

Wednesday, March 30, 2022

Readying our security arsenals for 5G and IoT

Readying our security arsenals for 5G and IoT

Tuesday, January 14, 2020

8 tips for data and generative AI governance  

8 tips for data and generative AI governance  

Wednesday, February 5, 2025

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more
  • PT Kereta Api Indonesia announces nationwide email and communication overhaul

    PT Kereta Api Indonesia announces nationwide email and communication overhaul

    The state railway operator’s upgraded email system improves privacy, operational reliability, and regulatory alignment for …Read more
  • Operationalizing sustainability in cybersecurity: Group-IB’s approach

    Operationalizing sustainability in cybersecurity: Group-IB’s approach

    See how the firm turned malware-group takedowns into measurements of sustainability and resilience gains: by …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.