Operation CYBER GUARDIAN: Inside Singapore's Largest Cyber Defense Operation

Operation CYBER GUARDIAN chronicles an eleven-month response to UNC3886, a highly capable APT that exploited zero-days in telco edge and virtualization infrastructure to compromise all four major Singaporean telecom operators; defenders used cross-agency coordination to contain and evict kernel-level rootkits and backdoors, while officials warned of continued nation-state targeting of critical infrastructure and published the group's CVEs, tools, and operational techniques.