The AI Security Race: How Singapore Can Stay Ahead of Smarter Cyber Threats

AI is reshaping the cyber landscape faster than many organisations can adapt. In Singapore’s hyper-connected economy, where digital services drive everything from healthcare to finance, the same technology that fuels innovation is also powering more precise, faster-moving cyberattacks.

A Fortinet–IDC study found that more than half of Singapore organisations encountered AI-powered threats over the past year, with many seeing their frequency double or even triple. Yet only one in five feels confident about defending against them. This widening gap between attack velocity and defence capability shows how quickly AI is changing the balance of power in cybersecurity.

When AI turns adversarial

Much of the public conversation treats AI as a futuristic threat. In reality, it is already at work behind the scenes of everyday cybercrime. Attackers are using generative models to craft flawless phishing emails, voice clones, and deepfake impersonations that easily bypass traditional filters. Others use AI-driven reconnaissance to scan thousands of systems per second, identifying weak points faster than defenders can patch them.

This isn’t speculation; it’s now an active business model. Across the dark web, Cybercrime-as-a-Service packages sell AI-generated malware, fake-identity kits, and language-localised phishing templates. What once required technical expertise can now be executed by anyone with access to these toolkits, multiplying both scale and speed.

For Singapore’s enterprises and government agencies, this new reality means that static defences are no longer enough. Signature-based systems and manual reviews simply can’t keep up with threats that mutate in real time.

Defence at machine speed

AI is not just the problem; it is also part of the solution. In Singapore, more than four in five organisations have already begun embedding AI into their security operations, primarily for detection, predictive analytics, and automated response.

At Fortinet, we see AI transforming the entire security lifecycle. AI-powered threat detection can correlate billions of events across networks, endpoints, and clouds in seconds. Adaptive algorithms can identify subtle anomalies that would otherwise go unnoticed, such as a login at an unusual hour or a data transfer that breaks routine patterns, and trigger an instant response.

This automation matters in a market where IT teams are lean. On average, fewer than one cybersecurity specialist supports every hundred employees in Singapore. By using AI to triage alerts and prioritise incidents, defenders can reclaim time and focus on the threats that matter most.

The human equation

Technology alone cannot close the gap. The human element remains the decisive factor in how effectively AI is deployed and governed. As the tools evolve, so must the people who use them.

Singapore is investing heavily in developing cyber talent and digital literacy. Through the Cyber Security Agency’s initiatives and public-private partnerships, the country is nurturing expertise in areas like AI-based threat analysis and zero-trust architecture. At Fortinet, we complement these efforts through our Network Security Expert (NSE) training programme and collaborations with Nanyang Polytechnic, Temasek Polytechnic, and the Institute of Technical Education — building local capability and expanding the next generation of defenders.

Equally important is cultivating judgment. AI may automate pattern recognition, but human oversight determines which insights to trust, how to interpret anomalies, and when to act. Training for critical thinking and digital vigilance is as vital as coding or analytics.

From fear to foresight

The narrative around AI and cybersecurity often swings between fear and hype. The truth is more pragmatic. AI has not replaced human attackers or defenders; it has simply accelerated the contest between them.

For Singapore, the task ahead is clear: build resilient systems that harness AI responsibly, supported by skilled professionals who understand its limits and potential. That means focusing less on speculative scenarios of superhuman AI and more on the very real ways it is already scaling phishing, automating breaches, and amplifying deception.

By combining AI’s speed with human discernment, Singapore can stay ahead of adversaries and maintain the trust that underpins its digital economy. The future of cybersecurity will not be won by machines alone — it will be secured by people who know how to make AI work for them, not against them.

The views and opinions expressed in this article are those of the author and do not necessarily reflect those of CDOTrends. Image credit: iStockphoto/gorodenkoff