Singapore plans to introduce new cybersecurity measures designed to block access to known phishing and malware websites as part of its updated national strategy to confront increasingly sophisticated cyber threats. The initiative, announced on October 13 by Senior Minister K. Shanmugam, aims to enhance the city-state’s cyberdefense capabilities to keep pace with the accelerated tactics employed by malicious actors, many of whom leverage artificial intelligence.
The protective domain name service (PDNS), expected to be deployed in 2027, will be managed by the Cyber Security Agency of Singapore’s (CSA) National Cybersecurity Command Centre. This system will block DNS requests to websites identified as engaging in illicit activities such as illegal gambling, scams, drug offenses, and other cybercrimes, as authorized under the Online Criminal Harms Act. The Act provides legal grounds for authorities to instruct internet service providers and other entities to restrict access to harmful content.
Shanmugam described the move as part of a broader shift toward a proactive, AI-driven defense posture that operates at national scale and matches the speed of evolving threats. Speaking at the opening of the 11th Singapore International Cyber Week, he emphasized the need to strengthen protections across critical infrastructure, build workforce expertise, deepen international partnerships, and adopt emerging technologies like AI and quantum computing.
Data cited by the CSA highlights the urgency of these measures. The number of malware-infected systems detected in Singapore surged from approximately 117,300 in 2024 to 284,300 in 2025, signaling a sharp rise in cyber infections. The growing threat from advanced persistent threat groups is particularly concerning for critical information infrastructure, such as power and telecommunications networks. A notable example occurred in July 2025 when UNC3886, a state-sponsored espionage group, targeted Singapore’s four major telecommunications companies. Although the attack was contained before it caused significant disruption, it underscored vulnerabilities within key sectors.
The National Cybersecurity Command Centre, established in 2025, plays a central role in coordinating Singapore’s cyberdefense efforts. It aggregates threat intelligence, facilitates faster operational responses, and will oversee the PDNS. The centre also works closely with defence agencies like the Ministry of Defence’s Centre for Strategic Infocomm Technologies, which develops proprietary threat detection systems to alert cyberdefenders of unusual network activities in real time.
Incorporating AI tools is a critical component of the strategy. With attackers increasingly relying on AI for rapid vulnerability assessments and large-scale assaults, Singapore intends to deploy AI-powered systems to detect and mitigate risks more effectively. The government plans to collaborate with industry and technology partners to accelerate the integration of AI-enabled cybersecurity solutions in critical sectors and promote the adoption of quantum-safe encryption technologies.
Industry experts see the PDNS as a potentially effective safeguard. Neville Vincent, senior vice-president of cybersecurity firm Trellix for Asia-Pacific, Japan, and Greater China, explained that the system works by intercepting DNS requests before a device connects to a potentially harmful website, thus preventing users from accessing malicious content. He noted that similar DNS-based blocking services are in operation in countries like Australia, Canada, the United Kingdom, and the United States, where they have successfully filtered billions of DNS requests annually.
However, Vincent also cautioned that the effectiveness of the PDNS will depend heavily on the timeliness and accuracy of information regarding malicious domains, and that new scam sites may initially evade detection. Users should therefore remain cautious even if certain websites are not immediately blocked.
Overall, Singapore’s updated cybersecurity strategy reflects a comprehensive approach aimed at bolstering national resilience against evolving cyber threats through technological innovation, strengthened partnerships, and enhanced regulatory frameworks.