Never trust, always verify: Why zero trust is essential for Singapore's cybersecurity
Recent announcements from Coordinating Minister for National Security K Shanmugam underscore the serious threats from cyberespionage groups like UNC3886 attacking critical information infrastructure. These are not your average opportunistic hackers. We are talking about sophisticated, well-resourced advanced persistent threat (APT) actors that gain unauthorised access to a computer network and target essential services.
The intent is clear: espionage, disruption and undermining national security. So, how can nations defend against such formidable and constantly evolving adversaries in today's complex digital landscape?
The answer lies in a fundamental shift in our cybersecurity philosophy: zero trust.
Beyond the perimeter: why the old ways don't cut it anymore
A decade or so ago, securing technology felt simpler. We relied on physical security, strong network perimeters, firewalls and basic identity management. Our applications were often monolithic, tucked safely behind these defences. But those days are long gone.
Today, software development is all about distributed, cloud-native, microservices-based applications. We are 'gluing together' countless pieces of existing code, each with its own complex dependencies – forming the software supply chain, which typically encompasses all tools, libraries and processes used to develop and publish software.
A NEWSLETTER FOR YOU
Friday, 8.30 am Asean Business
Business insights centering on South-east Asia's fast-growing economies.
Sign Up
Sign Up
This interconnected nature vastly increases the potential attack surface of our critical systems. Every new component, configuration and connection becomes a potential doorway for attackers.
It is no surprise then that we have seen a dramatic hike in common vulnerabilities and exposures (CVEs) – publicly disclosed cybersecurity vulnerabilities found in software or hardware that act as a standardised way to identify and catalogue security flaws. In the first seven months of 2025, almost 27,000 CVEs were reported – an average of 127 CVEs per day.
While investments in cybersecurity spending are essential, vulnerability scanners only work against known threats. This leaves us acutely exposed to zero-day attacks like the infamous Log4Shell, which exploit previously unknown weaknesses and leave defenders no time to prepare a response. Even internal bad actors can pose a zero-day threat; true zero trust means verifying even code from 'the inside'.
This increasing complexity, coupled with the sheer volume of new vulnerabilities, means configuration errors or omissions in our distributed cloud-native applications can easily introduce exploitable paths.
In fact, SUSE's Securing the Cloud Apac 2024 report revealed that IT decision-makers in the Asia-Pacific region experienced an average of 2.6 cloud-related security incidents in the past year, and 64 per cent confirm an incident in the last 12 months. This includes threats ranging from artificial intelligence-powered cyberattacks to edge security breaches, all aiming to disrupt and exploit our cloud environments.
This reality underscores the urgent need for a transformative approach. Zero trust, with its 'never trust, always verify' principle, is that transformation.
Hidden weapons in our defence arsenal
More than a buzzword, zero trust is a strategic approach amplified by modern cybersecurity features.
Zero-day exploits: proactive runtime protection
As we have seen, UNC3886 and similar APTs frequently leverage zero-day vulnerabilities. While we cannot always predict where the next zero-day attack will strike, zero trust's granular access controls and microsegmentation significantly limit an attacker's lateral movement after a breach.
Cloud-native security solutions that protect applications from zero-day attacks at runtime are crucial. These solutions continuously monitor application behaviour, detecting anomalies and blocking malicious code even if it is present. They also halt unauthorised attempts at access and data exfiltration. This means threat actors are stopped dead in their tracks, even against unknown exploits like Log4Shell.
Software bill of materials: knowing what exactly is in your software 'ingredients list'
In today's interconnected software landscape, understanding what is inside our applications is paramount. A software bill of materials (SBOM) provides a detailed, itemised list of all components, libraries and dependencies used in a piece of software, much like ingredients on a food label.
For zero trust, SBOMs are essential. They enable organisations to know precisely what they are deploying, allowing for continuous monitoring of known vulnerabilities within those components. This visibility is critical for identifying potential weak points in the software supply chain that attackers might exploit.
By understanding the provenance – the origins and history – and composition of every software element, zero-trust principles can be applied more effectively, verifying the integrity of each component before it is granted access or permission to execute.
SBOMs, therefore, become a foundational element for building trust in the software we consume and deploy, aligning perfectly with the never trust, always verify ethos by exposing hidden risks.
Open source: transparency, agility and collaborative defence
In the face of sophisticated nation-state adversaries, proprietary, black-box security solutions can be a disadvantage. This is where open source shines.
Open-source software, by its very nature, is transparent. Its code is openly available for review by a global community of experts. This transparency leads to faster discovery of vulnerabilities, and patching. Open-source solutions are also adaptable to specific national security needs, allowing for rapid deployment of new defences against evolving threats, increasing overall security resilience.
At the same time, it is crucial to acknowledge that while open source offers many benefits, it can also be a source of risk if not managed properly. Regular scanning for known vulnerabilities, diligent patching, and the careful selection of well-maintained and trusted open-source projects can help organisations guard against ever-evolving threats.
Building a resilient digital Singapore
Cyberattacks by groups like UNC3886 are a stark reminder that our digital defences must be as agile and sophisticated as the threats we face. Implementing a zero-trust architecture – bolstered by features like proactive runtime protection, verified SBOMs and the collaborative power of open source – is a pre-emptive advantage.
It ensures that even if an adversary gains a foothold, their mission becomes infinitely harder – safeguarding vital infrastructure and preserving trust so that nations like Singapore can protect and advance their missions as secure digital hubs.
The writer is SUSE's chief technology officer for Asia-Pacific, Japan and Greater China
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Business Times
2 hours ago
- Business Times
Asean's QR linkage push to go local could chip away at greenback's grip
[HO CHI MINH CITY] Armed with just his phone, Singaporean digital nomad Bobby Liu pays for coffee across Asia by scanning QR codes from Thailand's PromptPay, Indonesia's QRIS and Malaysia's DuitNow – all through his local banking or e-wallet apps, no cash or cards needed. Now based in Hanoi, he's eyeing Vietnam's entry into this cross-border payment club, as it is linking up with Singapore, and the rest of Asean, to enable instant QR transactions across millions of merchant touchpoints. 'Imagine what that kind of instant payment can do for small businesses – it will significantly improve their cash flow,' said Liu, a fintech entrepreneur and former venture capitalist. Such instant payment solutions, he said, will be key to boosting South-east Asian economies, which are dominated by small and medium-sized enterprises (SMEs). He also expects these cross-border innovations to take a chunk out of legacy services for money transfers such as the US's Swift network and credit card rails like Visa and Mastercard, as they offer faster, cheaper cross-border payments settled directly in local currencies, bypassing the US dollar as an intermediary. Leader in digital payments Over the past few years, the success and speed of implementing cross-border QR payment linkages in South-east Asia have been buoyed by the maturity of mobile payment penetration and national QR standards within each respective market, positioning the region as a leader in digital payments, experts say. A NEWSLETTER FOR YOU Friday, 8.30 am Asean Business Business insights centering on South-east Asia's fast-growing economies. Sign Up Sign Up According to a DataReportal report, as at February this year, QR code payment adoption among Internet users aged 16 and above in Malaysia, Thailand, Vietnam, and Singapore exceeded the global average of 50.8 per cent, with Malaysia (66.1 per cent) and Thailand (61.5 per cent) ranking just behind China (67.4 per cent) globally. In an effort to expand the growth beyond domestic markets, the Regional Payment Connectivity initiative was launched in 2022 by five Asean member states – Singapore, Indonesia, Thailand, Malaysia and the Philippines. Since then, Vietnam, Laos, Brunei and Cambodia have been added to the initiative. Its focus in the past three years has been to enable fast, seamless and more affordable cross-border payments in local currencies through standardised and interoperable QR codes, especially for retail transactions of small businesses, tourists, and migrant workers. This has required bilateral efforts between each pair of countries to ensure technical compatibility and compliance with their respective regulatory frameworks. 'A single QR payment system across the region would offer a real alternative to US-based payment networks for retail users and small businesses,' said Nawazish Mirza, professor of finance at Excelia Business School in France. 'They can chip away at the dollar's dominance in daily cross-border spending and help boost the use of local currencies over time.' Advancing local currency use In the joint statement at the 42nd Asean Summit held in May 2023, the 10-member bloc called for regional payment connectivity and promoted local currency transactions to support regional economic growth as well as strengthen financial resilience and integration. According to the 2023 policy position paper of Asean+3 Macroeconomic Research Office (Amro), the introduction of cross-border QR linkages between members, along with improvements to real-time gross settlement systems, offers significant potential to facilitate local currency transactions, which could mitigate the region's reliance on foreign currencies. Syed Ahmad Taufik Albar, group chief executive of community financial services at Maybank, underlined the benefits of such payment connectivity in areas like cross-border trade among micro-enterprises and SMEs whose products have high contents of domestic and Asean inputs, as well as in intra-Asean foreign direct investment and tourism. 'A successful implementation of a cross-border QR system across Asean's 10 member states will facilitate deeper Asean integration,' he said. This year, the position was highlighted again at the 46th Asean Summit in Kuala Lumpur, with the bloc's Economic Community Strategic Plan 2026-2030 noting that Asean will 'promote the use of local currencies to reduce the region's vulnerability to exchange rate fluctuations and external economic and financial shocks'. The strategic plan was developed during a period when the US dollar – traditionally dominant in global trade and investment – had fallen to its lowest levels in several years, and the US-led tariff hikes forced nations to engage in prolonged trade negotiations. Interest from Asian powerhouses The payment connectivity has now witnessed strong interest from Asian powerhouses like China and Japan to plug their digital payment networks into the Asean ecosystem, paving the way for better usage of local currencies for intraregional transactions and a step away from US-dominant systems. Last year, Japan's Ministry of Economy, Trade and Industry said it is working to ensure the nation's domestic JPQR payment system is compatible with the QR standards in seven Asean countries. The monetary collaboration between China and its Asean partners has also deepened, with initiatives such as bilateral currency swap agreements and the rollout of cross-border QR code payment linkages. Following the successful two-way QR payment connectivity with Cambodia earlier this year, China is advancing similar models through government-to-government cooperation across the South-east Asian region, with Vietnam, Indonesia in the pipeline. In May, Bank Indonesia announced that Indonesian citizens will be able to make transactions using the rupiah currency in China and Japan through its cross-border QR payment system from Aug 17 this year. Beyond government efforts, private financial institutions such as banks, digital payment firms and e-wallet operators are also playing a role in expanding the cross-border connectivity initiative. CBDC as the next opportunity Mirza believes that despite Asean's significant progress in regional QR payment connectivity, these systems are unlikely to replace Swift or major card networks for large-scale cross-border corporate transactions in the near term. 'To move local currency usage into large trade and investment flows, central bank digital currencies (CBDC) are now taking centre stage,' he added. Projects like mBridge have already piloted the use of CBDCs for cross-border payments among five participating central banks, including the People's Bank of China and the Bank of Thailand, with over 25 other central banks – such as those of Malaysia, the Philippines, and Indonesia – serving as observers. The project has entered the minimum viable product phase since 2024. By utilising the distributed ledger technology and smart contracts, CBDCs could reduce the need for financial intermediaries in cross-border payments and automate high-volume transactions in local currencies, significantly reducing both transaction speed and cost, Amro noted in its papers published in June 2025. Some 90 per cent of central banks were reportedly engaging in work relating to CBDCs, with China taking the lead by introducing e-CNY for domestic use. 'The speed of wider adoption will depend on progress in regulation and technology. Still, the direction is clear,' Mirza said. 'CBDCs are poised to become a key component of the region's next wave of financial integration.'
Business Times
18 hours ago
- Business Times
No plans to ‘fully liberalise' cross-border ride-hailing services: LTA
[SINGAPORE] The Land Transport Authority on Sunday (Aug 3) said it has 'no plan to fully liberalise' point-to-point transportation between Singapore and Malaysia via ride-hailing services. This was in response to recent media reports from Malaysia, which suggested that Singapore is looking to introduce cross-border on-demand ride services. The agency clarified that officials from both countries had met on Aug 1 to discuss cross-border service arrangements. 'During the discussions, the issue of allowing cross-border (ride-hailing) to ferry passengers was raised, but no decision was made,' said LTA. While the agency is open to ideas to improve the cross-border community experience, it said there is no intention to fully liberalise cross-border transportation through ride-hailing services. Currently, there is a reciprocal Cross Border Taxi Scheme (CBTS) that allows a licensed fleet of up to 200 taxis from each side to ferry passengers across the Causeway. These taxis are permitted to pick up and drop off passengers at a single designated point on either side: Larkin Sentral in Johor Bahru for Singapore taxis, and Ban San Street Terminal in Singapore for Malaysian taxis. A NEWSLETTER FOR YOU Friday, 8.30 am Asean Business Business insights centering on South-east Asia's fast-growing economies. Sign Up Sign Up The existing quota of the CBTS has not been fully utilised, said LTA. 'In view of commuter demand for more convenient cross-border travel, we will encourage full take-up of the quota.' The agency said it is also considering increasing the number of boarding and alighting points in both countries, in addition to the use of ride-hailing apps to book cross-border trips on licensed taxis. 'Our key priorities are to better meet commuter demand while safeguarding the interests of our taxi and private hire drivers,' LTA said. Any change in the CBTS will require agreements from both governments. LTA added that during earlier discussions, Malaysian authorities had requested for Singapore's cross-border buses to start operations from Johor Bahru at 4 am. It is exploring, together with cross-border bus operators, if operating times of these services can be adjusted to address bus crowding in the early mornings. This includes engaging private bus operators on potentially operating earlier services at higher fares. 'A key consideration is that the first buses should match the starting time of our local bus and MRT services when they arrive in Singapore,' said LTA.
Business Times
3 days ago
- Business Times
Most Asean nations get softer US tariffs, mitigating growth risks ahead of Aug 7 hikes
MOST Asean countries have secured reductions of the US reciprocal tariffs ahead of the prior Aug 1 deadline for the higher tariffs to kick in, following months of intense deal making and significant market access, trade and investment concessions. According to US President Donald Trump's executive order unveiled on Thursday (Jul 31), Singapore remains subject to a baseline rate of 10 per cent; the majority of South-east Asian economies face duties of between 19 and 20 per cent, which will now start on Aug 7. Rahul Bajoria, Asean and India economist at BofA Securities, told The Business Times: 'This is a better outcome than what was anticipated, but the rate of tariff is still much higher than what the status quo was. 'The Asean region saw a lot of front-loading of exports, so some payback is unavoidable, but with a better growth outcome, we see a respectable scope for GDP growth in the region.' Laos and Myanmar bear the heaviest burden in the region. Despite reduced tariffs of 40 per cent each, they still face one of the highest rates the US has imposed on its global trading partners. Dozens of other countries have been hit with tariffs ranging from 10 to 41 per cent, and goods from nations not specifically listed will be levied a universal US import tax of 10 per cent. A NEWSLETTER FOR YOU Friday, 8.30 am Asean Business Business insights centering on South-east Asia's fast-growing economies. Sign Up Sign Up The 40 per cent tariff on transshipped goods now applies not only to Vietnam, but also to other countries – a move analysts largely see as aimed at China. However, uncertainties remain surrounding the rules of origin used to identify targeted shipments, as well as upcoming sector-specific tariffs. Maybank senior economist Chua Hak Bin said: ''China + 1' is not dead, as all Asean countries will face lower effective tariff rates than China. China's multinational corporations (MNCs) will likely consider having an alternative base, given China's high effective tariff rates of over 35 per cent.' The Trump administration also signalled that 'meaningful' agreements with certain nations are forthcoming, potentially leading to revised duties, as the US seeks to bring more trading partners in line with its economic and national security priorities. 'Don't assume this is the end of the story. Trump regards this as an ongoing reality show,' noted Stephen Olson, former US trade negotiator and visiting senior fellow at ISEAS-Yusof Ishak Institute. 'Developing countries, especially those in South-east Asia hoping to pursue export-led development models, will be especially hard hit,' he added. Radhika Rao, senior economist at DBS, echoed this viewpoint, emphasising that despite better clarity on the country-specific tariffs, the new rates are two to six times higher than the average implied most-favoured-nation rates in 2024, suggesting significant economic impact for both the region and the US. However, China's stronger-than-expected economic performance and its potential rapprochement with the US could mitigate the risk of a negative growth shock for the Asean region, added Bajoria of BofA Securities. The Business Times has compiled key developments from the following Asean nations to examine the implications of the latest tariff landscape: Singapore: 'Sweet spot' with lowest rate Singapore will continue to be subject to a 10 per cent baseline tariff on exports to the US, the Ministry of Trade and Industry (MTI) said on Friday (Aug 1). 'MTI has confirmed this understanding with the Office of the US Trade Representative,' a ministry spokesperson said, referringn to the US' Executive Order released on Jul 31 (eastern time). 'We are closely monitoring developments and will seek clarification from our US counterparts as necessary,' the spokesperson added. The relatively low baseline tariff rate of 10 per cent should bring some relief to exporters in Singapore, economists said. 'Singapore is in a sweet spot and 'can live with it', as her reciprocal tariff is the lowest in Asia,' said Dr Chua, echoing similar remarks by the Republic's Prime Minister Lawrence Wong earlier this week. But companies looking to launch investments are likely still 'in a holding pattern' as they assess the frequent changes in tariff policies, said Denise Cheok, head of South-east Asia economics at Moody's Analytics. Trump's tariff letters state that the levies may change 'depending on our relationship with your country', noted Bernard Aw, the Asia-Pacific chief economist at credit insurer Coface. 'The certainty is that uncertainty will remain,' he said. With the fluid situation, he said companies likely have two plans ongoing – a short-term one to mitigate uncertainties, and a long-term plan to adjust to the new economic realities. The long-term one would entail reorganising logistics and shifting production, among other things. Even so, MNCs already in the city-state would likely maintain their presence, said Dr Chua. MNCs caught in a higher-tariff country may consider Singapore as a part of their supply chain. Still, Cheok estimates the baseline tariff could shave about 0.5 percentage points off Singapore's gross domestic product. 'With close trade partners attracting much higher tariffs, the hit to GDP from direct tariff-related disruptions would come in closer to about 1 percentage point,' she said. She added that beyond the headline 10 per cent, a key concern for Singapore is sectoral tariffs, especially on pharmaceuticals, which dominate Singapore's exports to the US. Since the Singapore economy is highly dependent on trade, the indirect effects of tariffs on global export demand remain a key factor to the outlook, said Cheok. Dr Chua said he expects Singapore's export and GDP growth to slow in H2, but not contract, given the reciprocal tariff deals, the low baseline tariff and a likely extension of the US-China trade truce. Reported by Sharon See from Singapore Vietnam: First, but not best While Vietnam was the first Asean country to strike a trade deal with the US by granting 'total access' to its market, its tariff outcome is no more favourable than that of most regional peers. Washington set a 20 per cent levy on goods imported from the South-east Asian country, with which the US ran a trade deficit of US$123.5 billion last year – the highest in Asean and third-highest globally. While this was a significant reduction from the previously announced 46 per cent, it remains slightly higher than the 19 per cent imposed on Malaysia, Indonesia, Thailand, Cambodia and the Philippines. According to S&P Global's latest purchasing managers' survey released on Aug 1, new export orders for Vietnam's manufactured goods contracted for the ninth consecutive month in July. While manufacturers remained optimistic about output growth over the coming year, sentiment fell to a three-month low – well below the series average – because of concerns over how the US tariffs weighed on the outlook. Still, the manufacturing sector returned to expansion in July after three months of decline, with firms securing enough domestic business to lift total new orders back into growth. Maybank analysts wrote in a recent note that Vietnam's steady rollout of private-sector reforms would cushion the impact of of the tariffs on external trade by promoting domestic investment and boosting the country's competitiveness as a destination for foreign direct investment. An improved business environment – characterised by reduced red tape, a more predictable legal framework, better education system and stronger local firms – is expected to broaden Vietnam's value proposition beyond being merely a low-cost destination, they added. Reported by Jamille Tran from Ho Chi Minh City Malaysia: Levelled playing field Just before the Aug 1 deadline kicked in, the US reduced the reciprocal tariff imposed on Malaysian imports to 19 per cent, down from the earlier 25 per cent rate, bringing the South-east Asian country in line with its regional peers. It also removes a key overhang for exporters, particularly in the electrical and electronics, as well as glove sectors. Hong Leong Investment Bank wrote in a note that from a trade standpoint, the harmonised US tariff rates across Asean ensure that Malaysia is not at a relative disadvantage. Ken Low, head of dealing at Moomoo Malaysia, noted that the tariff reduction offers short-term optimism. While the new rate is less damaging than the previous one, it remains on par with that of its regional peers, and continues to pose a hurdle to the competitiveness of Malaysian exports. In a statement on Friday, Malaysia's Ministry of Investment, Trade and Industry (Miti) stressed that the US-Malaysia tariff agreement was reached without compromising on key 'red-line' issues such as excise duty and Bumiputera equity quotas, thus protecting the country's sovereign economic policies. At a media briefing on Friday evening, Miti Minister Tengku Aziz said Malaysian semiconductor and pharmaceutical exports would remain exempt from US tariffs. Under the deal, the Malaysian government confirmed that 61 per cent or 6,911 items of its new trade arrangement's tariff lines with the United States would have zero tariffs. Malaysia and the US are expected to issue a joint statement on the tariff agreement over the weekend. Tengku Zafrul clarified there is no agreement or request from the US for exclusive access to Malaysia's rare earths, despite such minerals being central to US trade talks globally. To address the trade deficit with the US, Malaysia will make major procurements, including the purchase of another 30 Boeing aircraft valued at US$9.5 billion, he said. Miti said the government worked with Bank Negara Malaysia to model tariff scenarios and would implement targeted measures to support affected exporters and small and medium-sized enterprises. Reported by Tan Ai Leng from Kuala Lumpur Indonesia: Room to breathe Indonesia, which is grappling with domestic economic pressures , has secured a final US tariff rate of 19 per cent on its exports, easing fears of the fallout from President Trump's Apr 2 rate of 32 per cent. While still nearly double the 10 per cent baseline applied during the reprieve, the revised rate offers some relief as the country grapples with domestic economic pressures. Indonesia's tariff rate remains lower than Vietnam's, a key regional rival in labour-intensive sectors like textiles and footwear. As the US ranks as Indonesia's second-largest export market, analysts believe the reduced tariffs could boost trade and protect labour-intensive industries from economic challenges. The deal was reached following an agreement between President Prabowo Subianto and Trump to open Indonesia's vast market of 280 million consumers to US goods. Indonesia, which runs a US$17 billion trade surplus with the US, will eliminate tariff barriers on more than 99 per cent of goods coming in from the US, and commit to purchasing US$2.5 billion in agricultural products and US$15 billion in energy supplies. Citi's research team sees the agreement as having a net dovish impact on the Indonesian economy. While the shift in import sources may slightly weigh on the trade balance, the broader macroeconomic effects are expected to be manageable. Risks to the rupiah remain, but are likely to stay contained as long as Indonesia's commodity export prices remain stable. Reported by Elisa Valenta from Jakarta Cambodia: Double cuts to match peers Cambodia cheered the 'great news' of a 19-per-cent tariff on its US exports – a cut from the earlier 36 per cent and a significant drop from the original 49 per cent, which would have devastated its manufacturing sector and jarred its economy. The kingdom's Prime Minister Hun Manet took to Facebook on Friday morning to praise the 'excellent outcome', but analysts BT spoke with cautioned that Cambodia is not yet out of the woods. Adam Ahmad Samdin, an economist at research firm Oxford Economics, said that transshipments, the definition of which is left to the discretion of the US authorities, remain a bugbear for Cambodia, because its production is heavily reliant on Chinese inputs. The nation's post-pandemic economic expansion has been picking up speed, and annual growth has surpassed 5 per cent, but the double whammy of US tariffs and recent border disputes with neighbouring Thailand has clouded its outlook. Adam acknowledged that the reduced levy mitigates a substantial amount of downside risk to Cambodia's growth, noting that there remains scope for more immediate near-term support, as the kingdom improves its public debt ratio and rebuilds its fiscal space. Maybank economist Brian Lee added that border tensions will weigh on tourism, particularly in border areas, such as Poipet. Thailand is Cambodia's top source of international tourists. Nevertheless, the revised tariff brings Cambodia in line with its Asean neighbours and is lower than the rate imposed on its regional competitors (such as India) in the garment space, said Lee. He added that the risk of a sharp pullback in foreign direct investment is now reduced. The house expects Cambodia's growth to slow from 6 per cent in 2024 to 5 per cent this year and 4.6 per cent next year. Reported by Goh Ruoxue from Singapore
