Singapore Security Report — February 23, 2026

Security analysis based on open-source intelligence and web research. Period: February 16 — February 23, 2026.

Executive Summary

Singapore has experienced a dynamic security landscape from February 16 to February 23, 2026, marked by significant cyber defense operations, ongoing military readiness, and strategic diplomatic engagements. A major highlight was the public disclosure of an 11-month-long "Operation Cyber Guardian," which successfully countered a sophisticated, China-linked cyberattack targeting all four of Singapore's major telecommunications providers. Concurrently, the Singapore Armed Forces (SAF) conducted extensive live-firing and military exercises across the island, reinforcing its conventional defense posture. Diplomatically, Singapore's Defence Minister engaged in high-level discussions at the Munich Security Conference, emphasizing collective security against emerging threats, while the nation also announced a substantial increase in its 2026 defense budget to address a more complex global threat environment. These developments underscore Singapore's proactive approach to national security, balancing robust internal defenses with international cooperation amidst escalating geopolitical uncertainties.

Key Security Developments

• Cyberattack on Telecommunications Sector Neutralized
  Singapore's Cyber Security Agency (CSA) and Infocomm Media Development Authority (IMDA) publicly disclosed "Operation Cyber Guardian," an 11-month multi-agency effort that successfully thwarted a sophisticated cyberattack by the China-linked Advanced Persistent Threat (APT) group, UNC3886. The campaign, which targeted all four major telecommunications operators (M1, SIMBA Telecom, Singtel, and StarHub) using zero-day exploits and rootkits, was detected in July 2025 and fully mitigated by early 2026. While the attackers gained unauthorized access to some network parts and exfiltrated a small amount of technical data, there was no evidence of service disruption or exfiltration of sensitive customer information. This operation represents Singapore's largest coordinated cyber incident response to date, highlighting the nation's robust cyber defense capabilities and strong public-private sector collaboration.

• Multinational Cyberdefence Exercise Concludes
  The "Defence Cyber Marvel" exercise, conducted by the British Army Cyber Association, was held in Singapore for the first time from February 9 to 13, 2026. Over 2,500 cyberdefenders from 29 countries participated, including a combined team from Singapore's Digital and Intelligence Service (DIS) Defence Cyber Command and British Armed Forces counterparts. The exercise simulated complex, real-world cyberthreats targeting critical infrastructure, government networks, and private sector systems, providing participants with realistic experience in countering advanced persistent threat actors.

• Singapore Armed Forces Conduct Extensive Exercises
  The Singapore Armed Forces (SAF) conducted live-firing exercises in the Pasir Laba (SAFTI) Live-Firing Area and the islands of Pulau Sudong, Pulau Senang, and Pulau Pawai from February 16 to 23, 2026. Concurrently, military exercises using blanks and thunderflashes were carried out in various locations across the island, including Seletar, Marsiling, and Lim Chu Kang, during the same period. These routine exercises are crucial for maintaining the SAF's operational readiness and ensuring the proficiency of its personnel.

• Total Defence Exercise SG Ready Concludes with Focus on Resilience
  Exercise SG Ready 2026, a nationwide Total Defence exercise, concluded on February 15, 2026, after running from February 1 to 15. The exercise, co-led by MINDEF and key partners, focused on preparing Singaporeans for disruptions such as degraded digital connectivity and prolonged power outages, set against a scenario of an energy security crisis triggered by geopolitical uncertainties. It aimed to test the preparedness of individuals, businesses, and organizations to strengthen resilience against unexpected disruptions.

• Counter-Terrorism Exercise at National University of Singapore
  A joint counter-terrorism and emergency preparedness exercise, "Exercise Heartbeat," was held at the National University of Singapore (NUS) University Town on February 13, 2026. Organized by the Singapore Police Force (SPF) and Singapore Civil Defence Force (SCDF), the exercise involved over 120 participants responding to simulated terror attacks, including improvised explosive device (IED) detonations, armed terrorists, and a hostage situation. This exercise underscored the importance of inter-agency collaboration and community preparedness in combating terrorism.

• Defence Minister Advocates for Collective Maritime Security
  Singapore's Minister for Defence, Mr. Chan Chun Sing, attended the 62nd Munich Security Conference (MSC) from February 13 to 15, 2026. During the MSC Maritime Security Spotlight on February 13, he emphasized the critical need for international cooperation to address emerging challenges, particularly the security of Critical Underwater Infrastructure (CUI). He highlighted that maritime security affects global supply chains and that an attack on one part of the system impacts everyone, necessitating a collective response.

• Increased Defence Budget for 2026 Announced
  Singapore announced a defence budget of SGD24.93 billion (USD19.5 billion) for 2026, representing a 6.4% increase over the revised 2025 allocation. Prime Minister Lawrence Wong stated on February 12 that while defence spending is currently maintained at around 3% of GDP, Singapore is prepared to spend more if necessary due to a more dangerous and complex global threat environment. This increased expenditure is aimed at strengthening Singapore's overall security posture, including cybersecurity and adapting to new warfare technologies like drone warfare.

• Diplomatic Engagements with Key Partners
  On the sidelines of the Munich Security Conference, Defence Minister Chan Chun Sing held bilateral meetings with his counterparts from Germany, Estonia, Australia, the Netherlands, Malaysia, and the US Under Secretary of War for Policy. These meetings reaffirmed strong bilateral defense relations and discussed regional and international security environments. Additionally, Prime Minister Lawrence Wong was scheduled to visit Malaysia on February 20, 2026, indicating ongoing regional diplomatic efforts.

• Acquisition of P-8A Poseidon Aircraft and F-35 Fighter Jets
  In January 2026, the US Department of State approved a USD2.3 billion sale to Singapore of four Boeing P-8A Poseidon reconnaissance aircraft and eight Mk 54 MOD 0 lightweight torpedoes. These aircraft are intended to replace the Republic of Singapore Air Force's (RSAF) aging Fokker 50 maritime patrol aircraft, enhancing maritime situational awareness and anti-submarine warfare capabilities. Furthermore, Singapore's Ministry of Defence reaffirmed its plan to acquire a fleet of 20 F-35 fighter aircraft, with the first delivery expected by the end of 2026, significantly boosting its air combat capabilities.

• Singapore Monitoring US Tariff Developments
  Deputy Prime Minister Gan Kim Yong stated on February 22, 2026, that Singapore is closely monitoring the new 15% tariff threat from US President Donald Trump and is engaging its US counterparts. While acknowledging the unpredictable and uncertain operating environment, DPM Gan noted that Singapore's relative export competitiveness would not be significantly affected, but higher costs could dampen trade and investment flows. The government is prepared to introduce support measures if needed.

Geopolitical Impact and Regional Dynamics

Singapore's security developments during this period reflect a proactive and adaptive strategy in response to a rapidly evolving and increasingly uncertain global landscape. The successful neutralization of the China-linked cyberattack on its telecommunications sector, "Operation Cyber Guardian," underscores the growing prominence of cyber warfare as a critical domain of national security. This incident, involving a sophisticated state-sponsored actor, highlights the persistent threat of cyber espionage and potential disruption to critical infrastructure in Southeast Asia. Singapore's transparent disclosure and multi-agency response serve as a model for regional cybersecurity resilience, potentially encouraging greater information sharing and collaborative defense efforts among ASEAN members. The incident also subtly reinforces the complex relationship with major powers, particularly China, as cyber attribution often carries diplomatic implications.

The emphasis on collective maritime security, articulated by Defence Minister Chan Chun Sing at the Munich Security Conference, signals Singapore's commitment to multilateralism in addressing shared regional challenges. His focus on Critical Underwater Infrastructure (CUI) security is particularly pertinent given the region's vital shipping lanes and increasing reliance on undersea cables for global connectivity. This stance aligns with Singapore's long-standing foreign policy of promoting a rules-based international order and fostering cooperation to ensure the safety and security of common spaces. The ongoing Malacca Straits Patrol (MSP) initiatives, though not explicitly within this reporting period, provide a foundational context for such collaborative maritime security efforts, which are crucial for regional stability and trade.

The announced increase in Singapore's defense budget and the continued modernization of its armed forces, including the acquisition of P-8A Poseidon aircraft and F-35 fighter jets, project a strong deterrence posture. These acquisitions enhance Singapore's capabilities in maritime surveillance, anti-submarine warfare, and air defense, contributing to the regional balance of power. While these moves are primarily driven by national security imperatives, they also have implications for relations with major powers. The procurement of advanced US-made military hardware reinforces Singapore's strategic partnership with the United States, a key security provider in the Indo-Pacific. At the same time, Defence Minister Chan's assertion that the increased presence of US and China navy ships in Southeast Asia should not be viewed as a zero-sum game reflects Singapore's delicate balancing act, seeking to maintain good relations with both superpowers while safeguarding its national interests and regional stability.

The broader geopolitical context of a "more dangerous world" with escalating conflicts, as noted by Prime Minister Lawrence Wong, necessitates Singapore's adaptive approach. The ongoing discussions about US tariff threats further highlight the economic vulnerabilities and the need for Singapore to diversify its trade partnerships and strengthen economic resilience. These external pressures underscore Singapore's strategic imperative to maintain a strong defense, robust cybersecurity, and active diplomacy to navigate a fragmented and unpredictable global order.

Military and Defense Analysis

Singapore's military and defense posture during this period reflects a clear commitment to maintaining a credible and technologically advanced force capable of deterring threats and safeguarding national interests. The announcement of a SGD24.93 billion (USD19.5 billion) defense budget for 2026, representing a 6.4% increase, underscores this commitment, especially in light of a perceived "more dangerous world." While defense spending is currently maintained at approximately 3% of GDP, the government has indicated a readiness to increase this further if the security environment necessitates it. This sustained investment ensures that the Singapore Armed Forces (SAF) can continue its modernization programs and capability developments.

A significant aspect of Singapore's modernization efforts is the ongoing acquisition of advanced platforms. The US approval of a USD2.3 billion sale of four Boeing P-8A Poseidon maritime reconnaissance aircraft and eight Mk 54 MOD 0 lightweight torpedoes in January 2026 is a crucial step in enhancing the Republic of Singapore Air Force's (RSAF) maritime surveillance and anti-submarine warfare capabilities. These aircraft will replace the aging Fokker 50 fleet, providing a substantial upgrade in maritime domain awareness. Concurrently, the reaffirmation of the plan to acquire 20 F-35 fighter aircraft, with the first delivery expected by the end of 2026, will significantly elevate the RSAF's air combat capabilities through stealth, sensor fusion, and network-enabled technologies. The acquisition of used C-130H aircraft earlier in February 2026 also indicates a continuous effort to refresh airlift capabilities.

The regular conduct of military exercises, including live-firing drills in designated areas and broader military exercises across the island from February 16 to 23, 2026, demonstrates the SAF's commitment to operational readiness and training. These exercises are vital for personnel proficiency, equipment validation, and inter-service coordination. Furthermore, the participation in multinational exercises like "Defence Cyber Marvel" highlights Singapore's focus on cyber defense as an integral part of its overall military strategy. The emphasis on strengthening cybersecurity posture against advanced attacks and deepening partnerships with critical infrastructure owners, as articulated in the Budget 2026 speech, reflects a comprehensive approach to national defense that extends beyond traditional military domains.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, Singapore is likely to continue its heightened focus on cybersecurity resilience following the recent UNC3886 incident. We can anticipate further public-private sector collaborations and potentially new policy initiatives aimed at fortifying critical information infrastructure against sophisticated state-sponsored threats. The ongoing SAF military and live-firing exercises are expected to continue, maintaining a high state of readiness. Diplomatically, Singapore will likely sustain its active engagement in regional and international forums, particularly on issues of maritime security and cyber governance, to reinforce its commitment to a rules-based order. Prime Minister Lawrence Wong's visit to Malaysia on February 20, 2026, signals continued efforts to strengthen bilateral ties within ASEAN.

Critical flashpoints and risk areas: The primary risk areas for Singapore in the short term revolve around the escalating geopolitical tensions in the broader Indo-Pacific region. The increased presence of major power navies (US and China) in Southeast Asian waters, while not a zero-sum game from Singapore's perspective, could lead to miscalculations or unintended incidents that impact regional stability. The persistent threat of sophisticated cyberattacks from state and non-state actors remains a critical flashpoint, particularly against critical infrastructure and sensitive government networks. The global economic uncertainties, including the potential impact of new US tariffs, could also pose challenges to Singapore's trade-dependent economy, indirectly affecting its capacity for sustained defense investments. Furthermore, the ongoing threat of terrorism, which Singapore's counterterrorism community believes is at its highest level in recent times, necessitates continuous vigilance and preparedness.

Indicators to monitor: Key indicators to monitor include any further public disclosures or intelligence reports regarding cyber threats and attacks, particularly those with state-sponsored links. The frequency and scope of SAF exercises, especially those involving international partners, will offer insights into Singapore's defense cooperation and readiness levels. Diplomatic statements and engagements concerning regional security architecture, particularly within ASEAN and with major powers, will be crucial in gauging the geopolitical climate. Economic indicators, such as trade figures and foreign investment flows, will also be important to assess the impact of global economic shifts on Singapore's overall stability and capacity to fund its security ambitions. Finally, monitoring regional developments related to maritime disputes and potential flashpoints in the South China Sea will be essential.

Strategic recommendations: Singapore should continue to invest heavily in advanced cybersecurity capabilities, focusing on threat intelligence sharing, incident response, and the development of indigenous cyber defense technologies. Strengthening partnerships with international allies and private sector entities for collective cyber defense is paramount. Militarily, the SAF should proceed with its modernization programs, integrating new platforms like the P-8A Poseidon and F-35 fighter jets while emphasizing multi-domain operations and the effective use of unmanned systems. Diplomatically, Singapore should maintain its principled stance on a rules-based international order, actively promoting dialogue and cooperation to de-escalate tensions in the region. Diversifying economic partnerships and building resilience against global trade disruptions will also be crucial to ensure long-term national security. Finally, continuous public awareness campaigns and community engagement initiatives, such as those seen in Exercise SG Ready and Exercise Heartbeat, are vital to foster a whole-of-society approach to national security and counter-terrorism.