Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Ministry of Digital Development and Information
Parliament

MDDI's Response to PQ on Assessment of Risk of AI Systems Replicating Across Internet-connected Devices in Singapore

4 November 2026

Parliament Sitting on 4 November 2026

Question for Oral Answer

*31. Ms Joan Pereira asked the Minister for Digital Development and Information (a) what is the Government’s assessment of the risk of AI systems autonomously replicating across internet-connected devices in Singapore; (b) whether existing cybersecurity requirements for such devices adequately address this risk; and (c) what measures are in place to support families and small businesses to protect themselves.

Answer

Self-replicating malware is not new. However, AI agents capable of replicating across internet-connected devices could pose additional risks. They may be able to adapt to different environments and exploit security weaknesses with less human intervention, making them harder to detect and contain. Recent research has demonstrated AI agents' ability to replicate under pre-set conditions. However, this does not necessarily mean that they can easily compromise and spread across devices in real-world settings.

Existing cybersecurity safeguards remain relevant, as such threats typically rely on exploiting vulnerabilities in devices and networks. Manufacturers have an important responsibility to build security into their products, including secure by default configurations and timely security updates. Consumers and businesses must also play their part by adopting good cyber hygiene practices, including choosing secure devices and keeping them properly protected.

The Government supports these efforts through initiatives such as CSA's Cybersecurity Labelling Scheme, which helps consumers identify more secure smart devices and encourages manufacturers to improve product security. The SG Cyber Safe programme and Cyber Essentials mark provide practical guidance and resources for individuals and organisations. SMEs can also tap on the Chief Information Security Officer-as-a-Service programme for cybersecurity advisory support.

*Converted to written answer