Singapore shifts cyber strategy after UNC3886 attacks, deploys AI security tools
Singapore's Cyber Security Agency is shifting its strategy toward active threat hunting and AI-driven monitoring to protect government systems. This change follows a significant cyberespionage attack by the group UNC3886 on the nation's telecommunications infrastructure.
Why it matters
It highlights the evolving nature of state-sponsored cyber threats and the necessity for critical infrastructure operators to move beyond perimeter defense to internal network monitoring.
Gwenda Fong took over as chief executive of the Cyber Security Agency of Singapore and Commissioner of Cybersecurity on July 1.
Listen SINGAPORE – The local authorities have developed and deployed in-house artificial intelligence tools to better secure some 2,000 government systems under expanded cybersecurity efforts .
This proactive posture – shifting from perimeter defence to active threat hunting – comes in the wake of an attack on the country’s four major telcos by state-sponsored cyberespionage group UNC3886.
The attack was first made public in July 2025. It could have disrupted telecommunications and internet services had the attackers penetrated further, and threatened national security.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in