We Singaporeans have a saying for when something catches us completely off guard: “Blur like sotong.” And honestly? That’s how many businesses feel right now as they come to terms with a new and uncomfortable reality. AI is no longer just a productivity tool. In the wrong hands, it is fast becoming one of the most powerful hacking tools ever seen.

So, let’s break it down, no jargon, no fluff.

What Has Changed?

For years, finding a vulnerability in software and building a working exploit was painstaking work. Skilled security researchers would spend days, weeks, sometimes months carefully analysing code, testing theories, and piecing together an attack. It required deep expertise and a lot of patience.

AI has changed that equation dramatically.

Today’s most advanced AI models can autonomously scan thousands of software codebases, identify security weaknesses, and in some cases develop working exploits at a speed and scale no human team can match. What once took experts weeks can now happen in hours. And the skill barrier for carrying out such attacks is dropping fast.

The cybersecurity community has taken notice. According to IBM’s 2026 X-Force Threat Intelligence Index, attacks exploiting public-facing applications — driven by AI-enabled vulnerability discovery — jumped 44% year-on-year. And 87% of organisations globally report having been targeted by an AI-assisted cyberattack in the past year alone.

Why Should Singapore Businesses Care?

Singapore punches well above its weight as a financial, logistics, and technology hub. That also makes us an attractive target.

Think of it this way: previously, a burglar needed to case your building for weeks before finding a way in. Now, imagine a burglar who can scan your entire building, identify every weak lock, and pick the best one all in a single afternoon. That is what AI-assisted hacking looks like today.

For organisations in finance, healthcare, government-linked sectors, and critical infrastructure, the risk is especially real. But no business is too small to be caught in the crossfire, particularly when attackers increasingly go after supply chains and third-party vendors as entry points.

The Good News — The Locks Haven’t Changed

Here is the reassuring part that often gets lost in all the alarm: the AI is finding are not some new, exotic category of threats. They are mostly well-known classes of weaknesses; unpatched software, misconfigured systems, expired security certificates, poor access controls.

AI is not introducing a new game. It is just playing the existing one at a terrifying speed.

This means the fundamentals of good cybersecurity hygiene still apply. They just need to be done faster, more consistently, and more automatically than before:

• Keep software patched and up to date – do not let vulnerabilities sit unaddressed
• Manage your digital certificates properly – expired or misconfigured certificates are low-hanging fruit for attackers
• Control who has access to what -strong identity and access management matters more than ever
• Know what is in your environment – you cannot protect what you cannot see

The Window to Act Is Narrowing

The pace of AI development means that capabilities once limited to the most advanced research labs will eventually reach broader audiences – including, unfortunately, bad actors. Organisations that invest now in automating their security hygiene will be far better positioned when that happens.

For Singapore businesses, this is a timely reminder: cybersecurity is not a one-time project. It is an ongoing discipline that needs to keep pace with a rapidly changing threat landscape.

A Final Word

Kiasu as it may sound, getting ahead of this is the right move. You do not have to understand every technical detail of how modern AI hacking tools work. What matters is understanding that the pace of cyber threats has gone up a gear and your defences need to keep up.

If you are unsure where your organisation stands, that is a conversation worth having sooner rather than later.

Netrust is a trusted cybersecurity and digital identity solutions provider based in Singapore. We help organisations manage certificates, PKI infrastructure, and digital trust at scale.

 

Follow us on LinkedIn for the latest happenings/updates.