Critical information infrastructure owners must report all APT incidents under new rules: Josephine Teo
The reports must be made to the Cyber Security Agency of Singapore (CSA), said Minister for Digital Development and Information Josephine Teo at the Operational Technology Cybersecurity Expert Panel (OTCEP) Forum on Tuesday (Jul 29).
The new regulations, to take effect later this year, come as Singapore raises its cyber threat alert level in the face of an ongoing attack, according to Mrs Teo.
Earlier this month, Coordinating Minister for National Security K Shanmugam said Singapore is actively dealing with a "highly sophisticated threat actor" attacking its critical infrastructure.
Known as UNC3886, the entity has been described by Google-owned cybersecurity firm Mandiant as a "China-nexus espionage group" that has targeted prominent strategic organisations on a global scale.
'On several occasions in the past, CSA has raised the National Cyber Threat Alert Level (NCTAL). This is to urge everyone to be more alert to cyber threats across Singapore, and especially across all CIIs,' said Mrs Teo.
'Given the UNC3886 attack and heightened APT activity, it should not come as a surprise to anyone that we are currently in a heightened state of alert.'
She shared that the CSA has also convened the CEOs of all CII owners for 'a classified briefing on the threat landscape, focusing particularly on the threat from APTs'.
This is all part of efforts to share guidance on the threats and help the CIIs sharpen their readiness response, said Mrs Teo.
She urged the sector not to view the new measures, which flow from last year's Cybersecurity Act amendments to strengthen incident reporting requirements, as a burden.
Under the new regulations, CII owners must report the APT incidents verbally within two hours upon suspicion or awareness, followed by a written report within 72 hours, according to CSA.
'If organisations suspect that they have been targeted, they cannot – and should not – confront the attackers on their own,' said Mrs Teo.
'Reporting such detections early allows CSA to help you. It will also help us coordinate an appropriate national response.'
REAL-WORLD CONSEQUENCES
In her speech, Mrs Teo said it is easy to underestimate the importance of basic cyber hygiene, something that has caused many preventable attacks.
She said that cybersecurity is often likened to a team sport. However, while sports have rules, referees, and the principle of fair play, the cyber realm is more adversarial.
'Those of us in this room today are indeed, on the same team. We are playing defence. But our opponents do not play by the same rules,' she told attendees at Tuesday's forum.
'And a loss for us could have severe consequences for the people we have been entrusted to take care of.'
Mrs Teo cited cases in Ukraine, Russia and Norway, where critical functions like heating and sewage management were disrupted.
In fact, there are more of such attacks taking place worldwide, with the actors driven by various reasons, she said.
One is financial gain, while another is for long-term persistence, like in the case of APTs, said Mrs Teo.
APTs deploy advanced tools, evade detection and maintain persistent access in high-value networks, she said.
'APTs are often state-linked, well-resourced and determined. They may conduct espionage for their state sponsor. Their other task may be to develop the capacity to disrupt the services and assets in other states,' said Mrs Teo.
She noted that the ongoing UNC3886 attack on Singapore's critical infrastructure is part of a broader trend, with APT activity detected in Singapore rising over four-fold from 2021 to 2024.
'Until recently, we had not said much about APT activity. Nor had we named any of the groups involved,' said Mrs Teo.
However, the Singapore authorities are now doing so for the first time to let the public know that such threats are not imagined, but real, she said.
'We also need everyone to understand that the potential consequences to our economy and society are very serious,' said Mrs Teo.
APTs target critical infrastructure, which provides essential services for the country, and any attack will have serious real-world consequences.
'These 'live' attacks remind us that cybersecurity is not a nice-to-have. It is a must, not just for the IT personnel, but for the CEO and the board,' said Mrs Teo.
'In particular, the owners of CIIs must raise your vigilance, because you provide essential services that Singapore and Singaporeans depend on.'
The CSA will sign a memorandum of collaboration in OT cybersecurity with ST Engineering, to secure access to the latest tools and expertise, and let engineering teams on both sides jointly study and develop solutions in the sector, said Mrs Teo.
In his opening remarks at Tuesday's event, CSA chief executive David Koh said the agency will continue to work closely with local organisations and international partners to share information and take action against any threats.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
CNA
3 hours ago
- CNA
CEOs of critical infrastructure briefed on APT risks prior to Jul 18 announcement on UNC3886 attack
The Cyber Security Agency had convened CEOs of all critical information infrastructure (CII) for a briefing focusing on risks posed by advanced persistent threats (APTs). It took place before Jul 18, when it was announced that Singapore was under attack by by the entity identified as UNC3886. New requirements will be introduced for all CII owners to report incidents suspected to have been caused by APTs. Nicolas Ng with more. The Cyber Security Agency had convened CEOs of all critical information infrastructure (CII) for a briefing focusing on risks posed by advanced persistent threats (APTs). It took place before Jul 18, when it was announced that Singapore was under attack by by the entity identified as UNC3886. New requirements will be introduced for all CII owners to report incidents suspected to have been caused by APTs. Nicolas Ng with more.
CNA
4 hours ago
- CNA
Arcade operator suspends SG60 carnival game after copyright infringement notice, apologises for 'lapse'
SINGAPORE: An arcade operator apologised on Tuesday (Jul 29) to a games publisher over a "lapse in due diligence" and suspended its carnival game marking Singapore's 60th year of independence, following a copyright infringement notice. In a Facebook post on Monday, Origame accused The Arcade People of "ripping off" artwork from its games. Citing how it had come across a carnival game at City Square Mall, the company alleged artwork from its Kopi King game was "lifted wholesale" by the operator. The homegrown firm, which is known for its Singapore-themed card and tabletop games, claimed that the artwork appeared in an SG60-themed carnival game called Kopitiam Hero. According to pictures posted by Origame on Facebook, Kopitiam Hero uses the same "Sejak 1965!" tagline. It also alleged another piece of artwork was copied for a separate carnival game by The Arcade People and said the experience had left a "bitter aftertaste". In a statement on Facebook, The Arcade People apologised to Origame. It acknowledged the designs for two of its carnival games included artwork taken directly from Origame's games Kopi King and Chope!, and that the design of Kopitiam Hero "closely imitates" the font, style and colour of Kopi King's logo. "These elements were wrongly used without permission and were taken from Origame's website," it said. "This was not just an oversight - it was a lapse in due diligence on our part." The Arcade People added it would take "full and unequivocal responsibility" and that the imitation of design elements had stemmed from not having "proper checks and approvals" in place. Responding to CNA's queries, The Arcade People said it had immediately suspended the game from all rentals and public use until the artwork is replaced. It added it would permanently remove and destroy all materials and props associated with the infringing games, and take "additional steps" by internally reviewing all existing and future artwork usage to prevent such issues from happening again. Origame co-founder and producer Nicholas Pang confirmed with CNA his company had sent a notice of copyright infringement on Monday and noted The Arcade People was "taking responsibility for their mistake". Origame, established in 2019, has released over 20 original games, and its most popular games celebrate local hawker culture. Chope! tasks players with reserving tables with tissue packets, while Kopi King requires players to "snatch" ingredient cards to make coffee shop drink orders. Origame co-founder and designer Daryl Chow told CNA that while the firm has experienced copyright issues overseas for its internationally licensed games, this is the first time their work had been "stolen" in Singapore. Despite this, Mr Pang said Origame would be willing to work with The Arcade People going forward if "they wish to license and adapt our games in a way that property respects the designers and illustrators who created them".
Straits Times
4 hours ago
- Straits Times
No clarity yet on baseline or pharmaceutical tariffs with US: DPM Gan
Deputy Prime Minister Gan Kim Yong said he has told US officials that Singapore would be keen to negotiate its baseline tariff rate if the opportunity arises. SINGAPORE – The US government did not negotiate its tariffs on Singapore and did not want to commit on whether the 10 per cent baseline tax could rise or fall in the future, said Deputy Prime Minister Gan Kim Yong. DPM Gan, who visited the US from July 20 to 26 , added that he did not get to further discussions on pharmaceutical tariffs being contemplated by the Trump administration. He told the SG60 IPS-SBF Conference on July 29 that these talks did not take place as he did not get the chance to meet Commerce Secretary Howard Lutnick. He did, however, meet other officials, including Treasury Secretary Scott Bessent and Trade Representative Jamieson Greer. They discussed ways to keep up the long and mutually beneficial bilateral economic relationship, as well as potential collaboration in areas like the digital economy. DPM Gan also met business leaders in New York, and congressional leaders handling trade issues in Washington. He also visited an ST Engineering aerostructures factory in Maryland. The US administration was 'not in the mood to discuss any discount to the baseline tariff', DPM Gan said at a dialogue moderated by Mr David Rennie, The Economist's geopolitics editor. 'We also wanted to know whether the baseline tariff will stay at 10 per cent or will it be higher or lower? The answer was non-committal. They are still reviewing the tariff and, in time to come, they will make the appropriate announcement. So we just have to wait and see.' Top stories Swipe. Select. Stay informed. Singapore Grace Fu apologises for Tanjong Katong sinkhole, says road may stay closed for a few more days Singapore Terrorism threat in Singapore remains high, driven by events like Israeli-Palestinian conflict: ISD Singapore Liquidators score victory to recoup over $900 million from alleged scammer Ng Yu Zhi's associates Singapore Man on trial for raping woman who hired him to repair lights in her flat Sport IOC president Kirsty Coventry a 'huge supporter' of Singapore Singapore 7, including child and firefighter, taken to hospital after fire breaks out in Toa Payoh flat Singapore S'pore can and must meaningfully apply tech like AI in a way that creates jobs for locals: PM Wong Singapore Doctor who forged certificates for aesthetic procedures gets 4 months' jail DPM Gan, who is also Minister for Trade and Industry, said he has told US officials that Singapore would be keen to negotiate its baseline tariff rate if the opportunity arises. Pharmaceuticals and semiconductors, which are key exports from Singapore to the US, are currently exempt from baseline tariffs. But US President Donald Trump had earlier in 2025 threatened to end an exemption for pharmaceutical imports, saying tariffs would be imposed 'at a level that you haven't really seen before'. The US is a major market for Singapore-based drugmakers including American multinationals like Pfizer and Johnson & Johnson. DPM Gan said official-level discussions between Singapore and the US Department of Commerce, which commenced before his trip, are still ongoing. 'I can't go into detail because negotiation is ongoing and there's a bit of a confidentiality we need to maintain on both sides,' he said when asked what the US was looking to secure through these talks. He added that the US generally had concerns about what the country experienced during the Covid-19 pandemic, when supplies of critical pharmaceuticals were disrupted. 'They want to make sure that they have a secure supply line of pharmaceuticals. They do want to see whether they can onshore this production, so that they can produce (it) themselves. But they also know that it's not possible to onshore everything, because some of the raw materials are actually (from) outside of America,' he said. 'They do need to think about how they can work with partners, trusted partners, to make sure that their supply chain is secure and reliable. So that is what they are looking for in their partners, including Singapore,' he added. 'I think the administration's focus now is to finish the negotiation of reciprocal tariffs. Then it will start to engage countries on specific sectoral tariffs in pharmaceuticals and semiconductors.' DPM Gan said Singapore has yet to engage the US on the prospect of semiconductor tariffs . However, he added that discussions to preserve the country's access to artificial intelligence equipment and semiconductors are under way. Speaking at the same conference earlier in the day, Prime Minister Lawrence Wong said Singapore's trade and investment relationship with America, even with the tariffs, remains important. 'We would prefer to have zero tariffs of course, but if it is the baseline rate, then we are at the lowest category. We can live with it, and we can still do business and there will still be many opportunities for trade with the US, because whatever is happening in America now, the economy is still resilient, and there is still tremendous innovation happening in American companies, and so there will still be opportunities there,' he said. DPM Gan in his dialogue said the US economy continues to be relatively resilient. He said that based on the feedback from US businessmen he met on his trip, the outlook for the US economy seems cautiously optimistic, adding that Mr Trump's One Big Beautiful Bill , which includes tax cuts and business support measures, may have contributed to this. He said Singapore continues to have a good working relationship with the US. The US was Singapore's second-largest trading partner in 2024, while Singapore was its 16th-largest trading partner. Singapore was also the third-largest Asian investor in the US. More than 250 Singapore companies operate across 45 states, supporting around 350,000 jobs in the US, according to the Republic's Ministry of Trade and Industry. The US also has a longstanding trade surplus and free trade agreement with Singapore. The recent deals between the US and several countries, as well as the European Union economic bloc, are good news, DPM Gan said. 'This gives us a sense that there's good progress in the tariff negotiation. But I also come back with the sense that there remains significant uncertainty. I'm not sure whether the uncertainty has really been eliminated or even reduced,' he added. He cited the lack of clarity on the rules of origin that will be used to determine where products originate from. He also said it is unclear how reciprocal tariffs will be implemented, and how components from different countries and transshipped goods will be assessed. This comes on top of the uncertainty around sectoral tariffs, which are yet to be determined. There is also uncertainty about whether the investments that countries have pledged to the US under tariff deals are new contributions, or money that is currently invested in another country, DPM Gan said. 'For example, the EU has committed to make an investment... over a period of time. Japan has also committed investments into the US. Japan has been a major investor in Singapore. Whether the Japanese investment in Singapore will be diverted to the US is a question that is yet to be seen,' he said. 'There are (also) uncertainties as to how countries will respond to the outcome of the tariff negotiation. Some countries have also committed to purchase more from the US, and they would have been purchasing these products from other countries. Whether now, instead of purchasing from country A, country B, they will now purchase from the US, and therefore exports from these countries to affected countries will be changed,' he added. 'I think these uncertainties (are) second derivative uncertainties. No one is paying much attention yet, because we need to have a tariff settled, then we work out how the secondary impact would be.' Global supply chains will also be restructured if countries move their investments from destinations facing higher US tariffs to those facing lower tariffs, he added. 'The overall global trading system, what we call the rules-based multilateral trading system, that we depend on rules, respecting trade agreements with one another, and not change at will, is something that has been challenged,' DPM Gan said. 'Today, we can agree with one another on a certain tariff, but tomorrow, something happens. We start to change our tariff rate, and that is something that is very uncertain, and that has been seen over the last few months.'
