Singapore’s technology professionals are adept at identifying AI-generated phishing emails, yet a significant 58% have experienced successful attacks in the past year, according to Yubico’s 2026 Global State of Authentication Survey. The survey, conducted with Okta, highlights the persistent reliance on phishable methods despite the rise of AI-driven threats.
The survey revealed that whilst 81% of Singaporean organisations enforce multi-factor authentication (MFA), many still rely on vulnerable methods like passwords. Mobile TOTP or push authenticator apps are used by 49%, and 41% continue to use traditional usernames and passwords. This reliance begins early, with 58% of respondents issued passwords upon joining their organisations.
Geoff Schomburgk, Regional Vice President for Asia Pacific and Japan at Yubico, emphasised the need for a “human-in-the-loop approach” to maintain oversight over AI actions. He stated, “Businesses should adopt a human-in-the-loop approach that preserves human oversight and intervention for higher-risk AI actions.”
AI agents are increasingly taking on roles traditionally held by humans, with 51% of respondents comfortable with AI making low-risk decisions. However, 98% stress the importance of verifying AI identities, and 95% advocate for reviewing AI actions before execution.
As Singapore advances its AI initiatives under Smart Nation 2.0, the challenge remains to integrate secure authentication methods. Yubico and Okta are collaborating to embed phishing resistance into identity systems, aiming to reduce password dependency and enhance security without adding operational friction.
