Hostile Defence

19/08/2026

Cyber Security Agency of Singapore - CSA:

Attackers can exploit multiple vulnerabilities in Fortinet FortiWeb, FortiClient Windows, FortiManager, and FortiManager Cloud to bypass authentication, gain unauthorised access or execute arbitrary code. Patch promptly. Read the alert here: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-105/

Attackers can exploit multiple vulnerabilities in Fortinet FortiWeb, FortiClient Windows, FortiManager, and FortiManager Cloud to bypass authentication, gain unauthorised access or execute arbitrary code. Patch promptly. Read the alert here: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-105/

18/08/2026

The Hacker News:

⚠️ Cavern C2 now hides inside legitimate web traffic.

The Iranian-linked framework uses DNS to switch each transaction between direct HTTPS and Google Apps Script, making its command-and-control traffic harder to spot with network-based detection.

How it works: https://thehackernews.com/2026/08/cavern-c2-uses-dns-and-google-apps.html

⚠️ Cavern C2 now hides inside legitimate web traffic.

The Iranian-linked framework uses DNS to switch each transaction between direct HTTPS and Google Apps Script, making its command-and-control traffic harder to spot with network-based detection.

How it works: https://thehackernews.com/2026/08/cavern-c2-uses-dns-and-google-apps.html

18/08/2026

Cyveer:

Online Scam Red Flags - 10 Warning Signs & How to Stay Safe

Online Scam Red Flags - 10 Warning Signs & How to Stay Safe

18/08/2026

Cybersecurity and Infrastructure Security Agency:

A simple “hello” can help create awareness and deter suspicious activity. Learn more about the power of friendly check-ins using the link in the comment section below.

18/08/2026

Australian Communications and Media Authority:

Frustrated by spam?

There are steps you can take to reduce it:

⛔ Don’t tick subscribe boxes when completing online forms

🔍 Check the fine print when entering online competitions

☑️ Look out for pre-checked boxes when you buy products or sign up for services

🔒 Improve your computer security with spam or advertising filters.

Follow the link in the comments to find out more.

Frustrated by spam?

There are steps you can take to reduce it:

⛔ Don’t tick subscribe boxes when completing online forms

🔍 Check the fine print when entering online competitions

☑️ Look out for pre-checked boxes when you buy products or sign up for services

🔒 Improve your computer security with spam or advertising filters.

Follow the link in the comments to find out more.

18/08/2026

Cyber Security Agency of Singapore - CSA:

We’ve been sliding into your inbox for a while now and we're switching things up! Our notifications on cybersecurity alerts and advisories have moved to WhatsApp, so you can get the latest updates straight on your phone, wherever you are.

Subscribe to our new WhatsApp Channel and get timely updates at your fingertips.

👉 Subscribe here: https://www.whatsapp.com/channel/0029VbD9urjJENy0875bkL2U

We’ve been sliding into your inbox for a while now and we're switching things up! Our notifications on cybersecurity alerts and advisories have moved to WhatsApp, so you can get the latest updates straight on your phone, wherever you are.

Subscribe to our new WhatsApp Channel and get timely updates at your fingertips.

👉 Subscribe here: https://www.whatsapp.com/channel/0029VbD9urjJENy0875bkL2U

18/08/2026

Singapore Police Force:

𝗦𝘁𝗿𝗼𝗻𝗴𝗲𝗿 𝗦𝗮𝗳𝗲𝗴𝘂𝗮𝗿𝗱𝘀 𝗳𝗼𝗿 𝗦𝗶𝗻𝗴𝗮𝗽𝗼𝗿𝗲 𝗘𝗻𝗱-𝗨𝘀𝗲𝗿𝘀 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗢𝗻𝗹𝗶𝗻𝗲 𝗦𝗰𝗮𝗺𝘀 𝗧𝗵𝗿𝗼𝘂𝗴𝗵 𝗡𝗲𝘄 𝗮𝗻𝗱 𝗘𝗻𝗵𝗮𝗻𝗰𝗲𝗱 𝗖𝗼𝗱𝗲𝘀 𝗼𝗳 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗲

The Singapore Police Force has issued new and enhanced Codes of Practice (COPs) under the Online Criminal Harms Act (OCHA) to strengthen protection against scams on online messaging, online conferencing, social media and e-commerce services. Platforms offering Designated Online Services (DOSs) are obliged to put safeguards in place to meet COP requirements.

The safeguards broadly cover:
✅ Stronger safeguards against Government Official Impersonation Scams (GOIS)
✅ Better protection against scam advertisements
✅ Enhanced account security measures
✅ More protection from being contacted by unknown parties

Scammers continue to evolve their tactics, and a significant number of cases still involve scam actors approaching victims through Designated Online Services as first approach platforms. While online services are expected to do more to protect users, members of the public should continue to remain vigilant when interacting online.

Find out more: https://www.police.gov.sg/Media-Hub/News/2026/08/20260818_issuance_of_codes_of_practice_under_the_online_criminal_harms_act

18/08/2026

Singapore Police Force:

𝗦𝘁𝗿𝗼𝗻𝗴𝗲𝗿 𝗦𝗮𝗳𝗲𝗴𝘂𝗮𝗿𝗱𝘀 𝗳𝗼𝗿 𝗦𝗶𝗻𝗴𝗮𝗽𝗼𝗿𝗲 𝗘𝗻𝗱-𝗨𝘀𝗲𝗿𝘀 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗢𝗻𝗹𝗶𝗻𝗲 𝗦𝗰𝗮𝗺𝘀 𝗧𝗵𝗿𝗼𝘂𝗴𝗵 𝗡𝗲𝘄 𝗮𝗻𝗱 𝗘𝗻𝗵𝗮𝗻𝗰𝗲𝗱 𝗖𝗼𝗱𝗲𝘀 𝗼𝗳 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗲

The Singapore Police Force has issued new and enhanced Codes of Practice (COPs) under the Online Criminal Harms Act (OCHA) to strengthen protection against scams on online messaging, online conferencing, social media and e-commerce services. Platforms offering Designated Online Services (DOSs) are obliged to put safeguards in place to meet COP requirements.

The safeguards broadly cover:
✅ Stronger safeguards against Government Official Impersonation Scams (GOIS)
✅ Better protection against scam advertisements
✅ Enhanced account security measures
✅ More protection from being contacted by unknown parties

Scammers continue to evolve their tactics, and a significant number of cases still involve scam actors approaching victims through Designated Online Services as first approach platforms. While online services are expected to do more to protect users, members of the public should continue to remain vigilant when interacting online.

Find out more: https://www.police.gov.sg/Media-Hub/News/2026/08/20260818_issuance_of_codes_of_practice_under_the_online_criminal_harms_act

𝗦𝘁𝗿𝗼𝗻𝗴𝗲𝗿 𝗦𝗮𝗳𝗲𝗴𝘂𝗮𝗿𝗱𝘀 𝗳𝗼𝗿 𝗦𝗶𝗻𝗴𝗮𝗽𝗼𝗿𝗲 𝗘𝗻𝗱-𝗨𝘀𝗲𝗿𝘀 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗢𝗻𝗹𝗶𝗻𝗲 𝗦𝗰𝗮𝗺𝘀 𝗧𝗵𝗿𝗼𝘂𝗴𝗵 𝗡𝗲𝘄 𝗮𝗻𝗱 𝗘𝗻𝗵𝗮𝗻𝗰𝗲𝗱 𝗖𝗼𝗱𝗲𝘀 𝗼𝗳 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗲

The Singapore Police Force has issued new and enhanced Codes of Practice (COPs) under the Online Criminal Harms Act (OCHA) to strengthen protection against scams on online messaging, online conferencing, social media and e-commerce services. Platforms offering Designated Online Services (DOSs) are obliged to put safeguards in place to meet COP requirements.

The safeguards broadly cover:
✅ Stronger safeguards against Government Official Impersonation Scams (GOIS)
✅ Better protection against scam advertisements
✅ Enhanced account security measures
✅ More protection from being contacted by unknown parties

Scammers continue to evolve their tactics, and a significant number of cases still involve scam actors approaching victims through Designated Online Services as first approach platforms. While online services are expected to do more to protect users, members of the public should continue to remain vigilant when interacting online.

Find out more: https://www.police.gov.sg/Media-Hub/News/2026/08/20260818_issuance_of_codes_of_practice_under_the_online_criminal_harms_act

18/08/2026

數位發展部moda（Ministry of Digital Affairs）:

當企業資安防禦被突破時，第一時間該如何迅速且正確處置？

資安署推出《資安事件應變處理行動指引》，協助非技術人員也能按圖索驥，掌握應變流程。

面對資安攻擊，沒有「零風險」，只有「誰恢復得比較快」

4 大核心階段：
1️⃣ 準備階段：盤點核心資產、訂定應變政策、持續營運演練
2️⃣ 應變處理：偵測分析、啟動應變程序、緊急處理與跡證保全（千萬別急著關機！）
3️⃣ 通報與溝通：依法落實通報、公關危機處置
4️⃣ 復原與改善：5W1H 災損調查、系統重構與重新上線

6 大常見威脅教戰手冊：
設備感染 💻｜帳號被盜 🔑｜網路釣魚 🎣
支付詐欺 💳｜勒索軟體 🔒｜DDoS 攻擊 🌐

指引並隨附「應變處理檢核清單」、「應變里程碑建議時限」與「公開聲明範本」，協助企業團隊不再慌亂作戰！

下載完整指引👉 https://s.moda.gov.tw/c1DWBHH7BkKH
新聞稿👉 https://gov.tw/KHU