Philippines Security Report — February 28, 2026

Security analysis based on open-source intelligence and web research. Period: February 21 — February 28, 2026.

Executive Summary

The Philippines faced a critical week marked by escalating cybersecurity threats from China and continued maritime tensions in the South China Sea. A coordinated cyber offensive, identified by the Stratbase ADR Institute and the AFP Cyber Command, highlighted the digital domain as a new front in geopolitical disputes, with warnings of potential interference in the 2028 national elections. Concurrently, China conducted patrols in the South China Sea, accusing the Philippines of disrupting regional peace through its joint exercises with external partners. In response, Manila continued to strengthen its defense alliances and modernization efforts, particularly with the United States, Japan, and Australia, while also leveraging its 2026 ASEAN chairmanship to advocate for a legally binding Code of Conduct in the contested waters. These developments underscore the Philippines' proactive strategy to bolster its security posture amidst persistent external pressures and evolving regional dynamics.

Key Security Developments

• Coordinated Cyber Offensive from China Warned
  On February 21, 2026, the Stratbase ADR Institute warned that the Philippines is facing a "coordinated and sustained" cyber offensive from China, shifting geopolitical tensions from the West Philippine Sea into the digital domain. Stratbase President Victor Andres Manhit stated that this "unseen war" involves information dominance, psychological operations, and digital manipulation, citing Beijing's "three warfares" doctrine. The Department of Information and Communications Technology Secretary Henry Rhoel Aguda echoed these concerns, emphasizing that public trust is the country's most exploitable weakness. This development highlights a significant escalation in hybrid threats, with potential implications for national decision-making and the integrity of future elections.

• Escalating Chinese Cyber Threats Amid Geopolitical Tension
  The Armed Forces of the Philippines (AFP) Cyber Command chief, Brigadier General Joey Fontiveros, further warned on February 19, 2026, that cyber threats from China-based actors are intensifying due to geopolitical tensions, particularly linked to territorial disputes in the West Philippine Sea. Fontiveros noted persistent cyber attacks involving malware, DDoS attacks, data leaks, and website compromises aimed at advancing Beijing's regional ambitions. This underscores the critical need for enhanced cybersecurity measures and interagency coordination to protect vital infrastructure and national security.

• China Conducts South China Sea Patrol, Accuses Philippines of Disruption
  China's military announced on February 27, 2026, that it conducted a routine patrol in the South China Sea from February 23 to 26. Concurrently, China accused the Philippines of "disrupting" peace and stability by organizing joint patrols with countries outside the region. This statement from China's Southern Theatre Command spokesperson, Zhai Shichen, reinforces the ongoing territorial disputes and the differing interpretations of maritime activities in the contested waters.

• Philippines Pushes for South China Sea Code of Conduct as ASEAN Chair
  As the Philippines prepares to lead the Association of Southeast Asian Nations (ASEAN) in 2026, Foreign Affairs Secretary Maria Theresa Lazaro outlined the country's priority to establish a legally binding Code of Conduct (COC) with China in the South China Sea. Speaking at the 2026 Munich Security Conference, Lazaro emphasized the importance of this COC for regional peace and stability, noting that China has agreed to monthly face-to-face meetings to finalize the agreement, which the Philippines insists must be UNCLOS-based. This diplomatic push aims to codify rules of behavior and reduce the risk of maritime clashes.

• Philippines and US to Level Up 2026 Balikatan Drills with Cyber Focus
  The United States and the Philippines plan to integrate "cutting edge" technology to counter cyber threats during the 2026 edition of Exercise Balikatan. US Embassy ICT unit chief Jennifer Schmidt stated that cyber is integral to every military operation, and efforts are underway to incorporate advanced training ranges and robust cyber threat software into exercise scenarios. This signifies a strategic evolution of the Balikatan exercises, moving beyond traditional military interoperability to address modern hybrid threats.

• Over 500 PH-US Military Activities Planned for 2026 Amid Taiwan Concerns
  The Philippines and the United States are set to conduct more than 500 military and security activities in 2026, approved by the Mutual Defense Board – Security Engagement Board (MDB-SEB). These activities, including large-scale exercises like Balikatan, maritime cooperative activities, and air engagements, are viewed as a critical window ahead of China's stated goal of completing military preparations to attempt unification with Taiwan by force by 2027. The Philippines is also undertaking "major developments of facilities" in its northern regions, particularly Batanes and the Babuyan Islands, to support potential non-combatant evacuation operations for over 200,000 Filipinos in Taiwan.

• Japan to Join US-Philippines Salaknib Drills for First Time
  Japan plans to deploy 300 elite ground soldiers to the Philippines for the 2026 Salaknib military exercise, marking the first time the bilateral US-Philippine drills will include troops from an additional partner. Roughly 5,000 soldiers from the Philippines, the United States, Japan, and Australia are expected to participate in these drills, scheduled from April to May and then in June. This inclusion signifies a strategic shift towards tighter "minilateral" security coordination among US allies, with a growing focus on remote island defense.

• Philippines Seeks to Lift Defense Financing Cap and Modernization Timeline
  On February 24, 2026, the Department of National Defense (DND) pushed to remove restrictions on both foreign and local financing for defense acquisitions and to scrap the 15-year timeline governing the Armed Forces of the Philippines' (AFP) modernization program. Defense Assistant Secretary Erik Lawrence S. Dy highlighted that the current $300-million ceiling on foreign loans, established in 1974, limits the government's ability to acquire high-cost systems. This legislative push aims to accelerate the AFP's modernization, particularly under the Horizon plan, which has earmarked approximately $35 billion for upgrades over the next decade to counter China's presence in the South China Sea.

• US Authorizes $1.5 Billion in Security Assistance for Philippines
  The National Defense Authorization Act for fiscal 2026 (FY26 NDAA) authorizes up to $1.5 billion in new security assistance for the Philippines to modernize its defense capabilities. This includes $500 million in direct grant assistance, disbursed over five years (FY26-2030), and up to $1 billion in loan guarantees from the U.S. This funding is intended to accelerate Phase 3 of the AFP's modernization (Horizon 3), enhancing capabilities for territorial sovereignty, maritime domain awareness, countering coercive military activities, and strengthening counterterrorism efforts.

• Philippines and US Commemorate 80th Anniversary of Diplomatic Ties
  On February 20, 2026, President Ferdinand R. Marcos Jr. reaffirmed the enduring strength of the Philippines–United States alliance as the two nations commemorated the 80th anniversary of diplomatic relations. The celebration also marks the 75th anniversary of the U.S.-Philippine Alliance through the Mutual Defense Treaty. This milestone underscores a partnership built on shared democratic values, sustained cooperation across economic development, security, and people-to-people ties, with a commitment to advancing prosperity and security in the Indo-Pacific.

• Anti-Terrorism Council Strengthens Policies
  The Anti-Terrorism Council (ATC) convened on February 13, 2026, to discuss enhanced policies and strategic responses to counter terrorism and other emerging threats, following President Ferdinand R. Marcos Jr.'s directive to reinforce peace and order nationwide. Executive Secretary Ralph Recto, who chairs the ATC, directed all concerned agencies to deliver concrete, coordinated actions grounded in vigilance, unity, and compassion. This reflects the government's ongoing commitment to combating terrorist groups like ISIS-East Asia and the Communist Party of the Philippines/New People's Army (CPP/NPA) which primarily operate in the country's South.

• Philippines Deepens Diplomatic Ties with Austria
  On February 15, 2026, the Philippines and Austria reaffirmed their commitment to strengthening bilateral relations as they prepare to mark 80 years of diplomatic ties in 2026. The meeting between Secretary of Foreign Affairs Ma. Theresa P. Lazaro and Austrian Minister Beate Meinl-Reisinger covered cooperation in trade, investment, labor, education, and artificial intelligence. Austria also expressed interest in acceding to the ASEAN Treaty of Amity and Cooperation in Southeast Asia (TAC), a move welcomed by the Philippines as it assumes the ASEAN chairmanship in 2026.

Geopolitical Impact and Regional Dynamics

The security developments in the Philippines from February 21-28, 2026, significantly underscore the intensifying geopolitical competition in the Indo-Pacific, particularly concerning the South China Sea and the broader strategic rivalry between the United States and China. The explicit warnings of a "coordinated and sustained cyber offensive" from China, linked to territorial disputes, indicate a new and critical dimension to the conflict, moving beyond traditional maritime confrontations into the digital realm. This shift suggests that China is employing a "three warfares" doctrine—psychological, legal, and public opinion warfare—to undermine Philippine sovereignty and fracture domestic consensus. This digital aggression, coupled with China's physical patrols in the South China Sea and accusations against the Philippines for joint exercises, directly challenges regional stability and the rules-based international order.

In response, the Philippines is actively reinforcing its alliances and partnerships, particularly with the United States, Japan, and Australia. The planned 500+ military activities with the US in 2026, including the integration of cutting-edge cyber defense into Balikatan drills, demonstrate a robust commitment to collective defense and deterrence. Japan's first-time participation in the Salaknib exercise and Australia's ongoing involvement signal a growing "minilateral" security architecture aimed at enhancing interoperability and remote island defense. These strengthened ties with major powers like the US and its allies serve as a counterweight to China's assertive actions, reinforcing Manila's strategic autonomy and its ability to project a stronger defensive posture. The Philippines' diplomatic efforts, such as pushing for a legally binding Code of Conduct in the South China Sea during its 2026 ASEAN chairmanship, reflect a dual-track approach of deterrence and dialogue, aiming to manage tensions while upholding its sovereign rights.

The increasing US security assistance, including the authorized $1.5 billion for defense modernization, further solidifies the US-Philippines alliance and its role in regional stability. This financial backing, alongside commitments to enhance cyber defense capabilities, directly supports the Philippines' efforts to modernize its armed forces and improve maritime domain awareness. The deepening engagement with a broader range of partners, including France and Austria, also indicates a diversification of diplomatic and security relationships beyond traditional allies, reflecting a comprehensive strategy to navigate the complex geopolitical landscape. This collective strengthening of alliances and capabilities by the Philippines and its partners is likely to be perceived by China as an encirclement strategy, potentially leading to further escalations in rhetoric and actions, particularly in the South China Sea.

Military and Defense Analysis

The Philippines is undergoing a significant transformation in its military and defense capabilities, driven by the escalating tensions in the South China Sea and the evolving nature of modern warfare. The Department of National Defense (DND) is actively pushing for legislative changes to remove the $300-million ceiling on foreign loans for defense acquisitions and to scrap the 15-year timeline for the Armed Forces of the Philippines' (AFP) modernization program. This initiative aims to provide greater flexibility and financial capacity to acquire high-cost, advanced defense systems, which are crucial for the AFP's Horizon plan that has earmarked approximately $35 billion for upgrades over the next decade.

The focus of modernization is clearly on enhancing capabilities to counter China's growing presence. The US National Defense Authorization Act for fiscal 2026 (FY26 NDAA) has authorized up to $1.5 billion in new security assistance for the Philippines, comprising $500 million in direct grant assistance and up to $1 billion in loan guarantees. This substantial funding is specifically designed to accelerate Horizon 3 of the AFP's modernization, targeting improvements in territorial sovereignty, maritime domain awareness, and capabilities to counter coercive military activities. Key acquisitions include advanced warships, missile systems, and other platforms. The emphasis on integrating "cutting edge" technology to counter cyber threats during the 2026 Balikatan exercise with the US also highlights a strategic shift towards addressing hybrid warfare capabilities.

The force posture is increasingly oriented towards external defense and maritime security. The planned 500+ military and security activities with the US in 2026, including large-scale exercises and maritime cooperative activities, are not only for interoperability but also serve as a deterrent, especially in the context of potential contingencies related to Taiwan. The development of facilities in northern Philippines, such as Batanes and the Babuyan Islands, for non-combatant evacuation operations, further indicates a proactive approach to potential regional conflicts. The inclusion of Japan and Australia in military drills like Salaknib signifies a move towards a more networked and collective defense posture, enhancing the Philippines' ability to operate with "like-minded" partners in complex scenarios.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, the Philippines will likely continue to experience heightened cybersecurity threats, particularly from state-sponsored actors linked to China. The warnings from Stratbase ADR Institute and the AFP Cyber Command suggest that these digital incursions will remain a persistent challenge, focusing on information dominance and potential influence operations. Expect to see continued emphasis on cybersecurity conferences and capacity-building efforts, possibly with increased involvement from allies like the US and Canada. In the South China Sea, maritime confrontations are expected to persist, with China maintaining its assertive posture through patrols and rhetoric. The Philippines, under its 2026 ASEAN chairmanship, will likely intensify its diplomatic push for a legally binding Code of Conduct, although significant breakthroughs are unlikely given China's resistance. Joint military exercises with the US, Japan, and Australia will continue to be a prominent feature, demonstrating collective resolve and enhancing interoperability.

Critical flashpoints and risk areas: The West Philippine Sea remains the primary flashpoint, with the risk of miscalculation or accidental escalation during maritime encounters between Philippine and Chinese vessels. The increasing frequency and scope of joint patrols by the Philippines with external partners could be perceived as provocative by China, potentially leading to more aggressive countermeasures. The digital domain is an emerging critical risk area, with the potential for cyberattacks to disrupt critical infrastructure, compromise sensitive data, or influence public opinion, especially leading up to the 2028 elections. Furthermore, the Taiwan Strait remains a significant concern, as any conflict there would have direct implications for the Philippines due to its geographical proximity and the large number of Filipino expatriates in Taiwan. The ongoing development of facilities in the northern Philippines for evacuation purposes highlights this vulnerability.

Indicators to monitor: Key indicators to monitor include the frequency and nature of Chinese maritime activities in the West Philippine Sea, particularly around contested features. Any significant increase in the scale or assertiveness of these operations would signal rising tensions. On the cybersecurity front, watch for reports of major cyberattacks targeting Philippine government agencies, critical infrastructure, or media outlets, as well as evidence of large-scale disinformation campaigns. Progress (or lack thereof) in the ASEAN-China Code of Conduct negotiations will also be crucial, indicating the efficacy of diplomatic efforts. Finally, observe the pace and scope of the AFP's modernization program, particularly the utilization of the newly authorized US security assistance, as this will reflect the Philippines' commitment to bolstering its defense capabilities.

Strategic recommendations: The Philippines should prioritize a whole-of-government approach to cybersecurity, investing heavily in defensive capabilities, threat intelligence sharing with allies, and public awareness campaigns to counter disinformation. Strengthening interagency coordination and incident response mechanisms is paramount. Diplomatically, Manila should continue to leverage its ASEAN chairmanship to build regional consensus on maritime security and the rule of law, pushing for a robust and legally binding Code of Conduct. Simultaneously, it must continue to diversify and deepen its security partnerships with "like-minded" nations beyond traditional allies, exploring new avenues for defense cooperation, intelligence sharing, and joint exercises. Militarily, the DND's push to remove financing caps and accelerate the AFP modernization program is critical. Strategic investments should focus on maritime domain awareness, anti-access/area denial (A2/AD) capabilities, and cyber defense systems. Finally, the government must continue to develop and refine contingency plans for regional crises, particularly concerning the Taiwan Strait, including robust non-combatant evacuation operations and humanitarian assistance mechanisms.