Singapore faces a new wave of AI-driven cyber threats in 2026, as deepfakes and synthetic media redefine the nation’s digital risk landscape. Kris Day, Senior Vice President for Asia Pacific and Japan, SentinelOne, says autonomous cybersecurity is now essential to maintain trust, resilience and national security.
Singapore’s digital infrastructure is entering a new era – one defined not just by innovation but by escalating risk. In 2025, the Cyber Security Agency of Singapore (CSA) reported a 145% surge in AI-enabled scams while identity fraud cases spiked 207%, the highest in Asia-Pacific. Deepfake extortion campaigns targeted over 100 public officials, and synthetic media attacks breached biometric systems, hijacked video calls and manipulated public trust.
These threats are no longer theoretical. They’re systemic, scalable and increasingly autonomous. As Singapore expands its digital services ecosystem, the stakes in 2026 will be even higher.
Synthetic media will be the battlefield
Cybercriminals are evolving faster than policy. In 2026, we expect synthetic media – deepfakes, voice clones and AI-generated documents – to become the primary vector for identity fraud and social engineering. Apart from deceiving individuals, these tools will also be used to infiltrate enterprise systems, impersonate executives and compromise national infrastructure.
Singapore’s US$20 million investment to counter deepfake threats is a vital step; however, the velocity of deception demands more than funding. It requires a paradigm shift from reactive defence to autonomous resilience.
Trust-based systems are vulnerable by design
Singapore’s reliance on trust-based platforms – Singpass, PayNow, MyHealth and GovWallet – means that even brief disruptions can ripple across millions of lives. As more services rapidly go digital and more citizens rely on biometric authentication, the attack surface will expand dramatically.
Frozen payments, falsified identities and delayed surgeries extend past operational failures into national vulnerabilities as well as systemic threats. In a city where trust is currency, resilience must be built into every digital touchpoint.
Autonomous cybersecurity is the new standard
To meet the threats of the future, it is imperative that Singapore embraces autonomous cybersecurity – systems that detect, respond and remediate threats in real time, without human intervention. AI-powered threat detection, zero-trust architecture, encrypted backups and continuous behavioural analytics have to become foundational.
In today’s threat landscape, manual response is no longer fast enough to be effective. Hence, we believe that only AI-powered defences are capable of keeping pace with the speed and sophistication of AI-driven threats.
Building a cyber-aware nation
The rise of Initial Access Brokers (IABs) – cybercriminals who sell stolen credentials and authentication tokens – has exposed critical gaps in identity and access management (IAM). Singaporean enterprises are increasingly targeted, with attackers exploiting weak IAM protocols to gain entry into sensitive systems.
Traditional defences like passwords and basic biometrics are no longer sufficient. Organisations should adopt multi-layered identity verification, including biometric authentication that can detect liveness and resist spoofing.
Singapore is making commendable strides in this area – initiatives such as CATOS (Cybersecurity Awareness and Training for Operational Systems the ‘Unseen Enemy’ campaign and CSA’s expanded training programs are building a more cyber-aware workforce. The recent updates to the Data Protection Trustmark (DPTM) and the launch of the Global AI Assurance Sandbox reflect a strong commitment to responsible innovation.
These efforts demand scaling and acceleration. According to IBM’s 2025 CEO Study, only 14% of Singaporean companies have successfully scaled AI and just 25% of AI projects have achieved expected ROI. Meanwhile, 31% of the workforce will require reskilling in the next three years, with 65% of organisations turning to automation to bridge capability gaps.
This underscores a critical truth: technology alone is not enough. We need people, processes and platforms working in harmony.
Cybersecurity is a boardroom issue
Cyber resilience hinges on a holistic framework. Beyond firewalls and endpoint protection, securing the entire digital ecosystem is essential. That includes cloud environments, supply chains, third-party integrations and even social media channels. Threat actors are opportunistic. They’ll exploit the weakest link, whether it is a misconfigured server or an unsuspecting employee.
Boards and executive teams must treat cybersecurity as a strategic imperative, not a compliance checkbox. This means investing in threat intelligence, conducting regular penetration testing and ensuring that incident response plans include forensic validation of digital evidence – simply because in 2025, even ‘proof’ can be faked and should be questioned and verified by default.
Singapore can lead the region
Singapore’s position as a global financial and innovation hub makes it both a target and a trailblazer. By embedding autonomous resilience into its digital DNA, the nation can lead Southeast Asia in secure AI adoption, trusted digital services and cyber workforce development.
Singapore’s cybersecurity crossroads is not a place of uncertainty; it is a launchpad. With the right investments, partnerships and mindset, the nation can build a digital future that is not only innovative but secure by design.
