Philippines Security Report — March 18, 2026

Security analysis based on open-source intelligence and web research. Period: March 11 — March 18, 2026.

Executive Summary

The Philippines experienced a dynamic security landscape from March 11 to March 18, 2026, primarily characterized by escalating maritime tensions with China in the South China Sea and a deepening security alliance with the United States. Manila firmly rejected Beijing's renewed sovereignty claims over Scarborough Shoal, while simultaneously committing to a peaceful resolution through a Code of Conduct under its ASEAN chairmanship. Domestically, the arrest of former President Rodrigo Duterte on an International Criminal Court warrant marked a significant development in accountability. Cybersecurity threats, particularly from China-linked actors, remained a persistent concern, prompting calls for stronger legislative measures. The nation also actively engaged with ASEAN partners to address the regional implications of the Middle East conflict, focusing on energy and maritime trade stability.

Key Security Developments

• Diplomatic Standoff over South China Sea Sovereignty
  On March 16, 2026, the Philippines explicitly rejected China's renewed assertions of sovereignty over the entire South China Sea, specifically disputing claims related to Scarborough Shoal. Philippine foreign ministry spokesperson Rogelio Villanueva affirmed Manila's "indivisible, incontrovertible and longstanding sovereignty" over the shoal and other Spratly Islands, marking the latest escalation in a war of words between the two nations. This rejection came after the Chinese Embassy in Manila presented a 1990 letter on March 14, attempting to support its claims over Scarborough Shoal, which the Department of Foreign Affairs reiterated should be addressed through established diplomatic channels.

• Philippines to Chair ASEAN and Push for South China Sea Code of Conduct
  On March 11, 2026, Department of Foreign Affairs Secretary Ma. Theresa Lazaro stated that the Philippines, as the ASEAN Chair in 2026, is committed to ensuring the South China Sea remains a "sea of peace, stability, and cooperation." Manila aims to work constructively with all ASEAN Member States and China to conclude an effective, substantive, and legally binding Code of Conduct (COC) within the year, in line with agreed guidelines and international law, particularly UNCLOS. This follows China's recent expression of openness to expedite COC negotiations.

• Arrest of Former President Rodrigo Duterte
  In a significant internal security and justice development, former President Rodrigo Duterte was arrested in Manila on March 11, 2026. The arrest was carried out based on an International Criminal Court (ICC) warrant for the crime against humanity of murder, related to extrajudicial killings committed during his "war on drugs" from November 2011 to June 2016. He has since been transferred to the Hague to await possible trial.

• Confirmation of Senior Military Officers
  On March 17, 2026, the Commission on Appointments (CA) confirmed the ad interim appointments and nominations of 57 generals, flag officers, and senior officers of the Armed Forces of the Philippines (AFP). This confirmation was highlighted as a recognition of the officers' competence, integrity, and leadership crucial for guiding the military amidst evolving security challenges and defending the nation's territorial integrity.

• Persistent Cybersecurity Threats from China-linked Actors
  The Armed Forces of the Philippines (AFP) Cyber Command chief, Brigadier General Joey Fontiveros, warned in February 2026 that cyber threats against the Philippines from China-based actors are intensifying due to geopolitical tensions, particularly linked to territorial disputes in the West Philippine Sea. These threats include malware deployment, DDoS attacks, data leaks, and website compromises. High-risk sectors include public administration, accounting for over 20% of dark web threats.

• National Telecommunications Commission (NTC) Data Breach
  Reports from March 13, 2025 (referenced in March 2026 cybersecurity news) indicated that the National Telecommunications Commission (NTC) of the Philippines suffered a significant data breach, with sensitive information allegedly leaked on the hacking forum BreachForums. The threat actor "ph1ns," known for targeting Philippine government systems, claimed responsibility for compromising internal NTC systems and exfiltrating datasets containing regional records, email addresses, phone numbers, and cell IDs.

• Uncovering of China-linked Espionage Activities
  On March 4, 2026, the National Security Council (NSC) confirmed that Philippine authorities had uncovered "espionage and foreign-directed malign activities" linked to the People's Republic of China, involving Filipino nationals. The NSC stated that actions have been taken against the individuals, who confessed their complicity and are cooperating with authorities. The NSC also urged Congress to prioritize the passage of an Anti-Espionage Bill and an Anti-Foreign Malign Influence and Interference Act to strengthen legal tools against covert foreign state operations.

• Philippines Engages ASEAN on Middle East Conflict Impact
  On March 13, 2026, the Philippines, as the current ASEAN Chair, convened a special virtual meeting of foreign ministers from Southeast Asian countries to discuss the ongoing conflict in the Middle East and its implications for the region. Discussions focused on the importance of an immediate cessation of hostilities, exercising self-restraint, and resolving differences through diplomacy. The ministers also addressed the adverse impacts on global economic activity, particularly energy markets and maritime transport routes, stressing the need for stable and reliable supply chains.

• President Marcos Calls for UN Security Council Inclusion Amidst Middle East Tensions
  On March 11, 2026, President Ferdinand Marcos Jr. advocated for the Philippines' inclusion in the UN Security Council and called for a de-escalation of the Middle East conflict. He also sought to allay public fears regarding a potential oil supply crisis in the Philippines due to the conflict. The National Security Council (NSC) had previously dismissed claims on March 2, 2026, that the Middle East crisis would spill over into the Philippines due to the presence of Enhanced Defense Cooperation Agreement (EDCA) sites, stating there was no verified direct threat to Philippine territory.

• Routine Security Drill at Malacañang Palace
  On March 16, 2026, Malacañang clarified that observed security activities near the presidential palace, which led to social media speculation of a heightened alert, were part of a routine security exercise. Presidential Communications Office Undersecretary Claire Castro stated these measures were intended to test the operational readiness of security personnel.

Geopolitical Impact and Regional Dynamics

The period from March 11-18, 2026, underscored the Philippines' pivotal role in regional security, particularly concerning the South China Sea dispute and its deepening alliance with the United States. Manila's firm rejection of China's renewed sovereignty claims over Scarborough Shoal on March 16 highlights a continued assertive stance against Beijing's expansive claims, which is a significant factor in regional stability. As the ASEAN Chair in 2026, the Philippines' commitment to concluding a legally binding Code of Conduct (COC) for the South China Sea positions it as a key diplomatic player, attempting to balance regional consensus with national interests. This diplomatic push, however, occurs against a backdrop of China's consistent rejection of the 2016 arbitral ruling and its continued presence in contested areas, creating a structural imbalance where international law and on-the-ground control diverge.

The US-Philippines alliance continues to be a cornerstone of Manila's security strategy. Plans for over 500 military and security activities in 2026, including major exercises like Balikatan, and the commitment of an additional $144 million for EDCA sites demonstrate a robust and expanding defense cooperation. The inclusion of Japan and Australia in the upcoming Salaknib exercise further illustrates a growing "minilateral" security coordination among US allies, aimed at bolstering deterrence in the First Island Chain and addressing contingencies in the South China Sea and Taiwan Strait. This deepening alignment with the US and its partners is a direct response to China's increasing assertiveness and contributes to a more complex strategic landscape in the Indo-Pacific, potentially increasing the risk of miscalculation if not carefully managed.

The Philippines' active role in convening ASEAN foreign ministers to discuss the Middle East conflict also reflects its broader commitment to regional stability beyond immediate territorial disputes. While the National Security Council dismissed direct threats to EDCA sites from the Middle East conflict, the discussions on energy markets and maritime transport routes underscore the interconnectedness of global security challenges and the Philippines' efforts to mitigate their regional economic and security impacts.

Military and Defense Analysis

The Armed Forces of the Philippines (AFP) is demonstrably continuing its modernization programs and strengthening its force posture, particularly in response to maritime security challenges in the South China Sea. The confirmation of 57 senior AFP officers on March 17 signals a commitment to strong leadership and institutional continuity amidst these efforts. The defense chief's statement on March 17 emphasizing the need to "beef up air defenses" indicates a recognition of critical capability gaps and a strategic direction towards enhancing air domain awareness and protection, which is vital for archipelagic defense.

A significant aspect of the Philippines' defense strategy is the deepening interoperability with the United States. The planned conduct of over 500 military and security activities in 2026, including large-scale exercises and maritime cooperative activities, is a clear indicator of this. The US commitment of an additional $144 million for infrastructure development at Enhanced Defense Cooperation Agreement (EDCA) sites directly supports the expansion of shared facilities and capabilities. These sites are crucial for cooperative exercises, joint training, and humanitarian assistance, enhancing the AFP's ability to monitor and respond to illicit maritime activities. The deployment of US cutting-edge missile and uncrewed systems to the Philippines further bolsters the country's deterrence capabilities, particularly against aggression in the South China Sea. The expansion of exercises like Salaknib to include Japan and Australia also highlights a strategic shift towards multilateral cooperation, enhancing collective defense and interoperability with like-minded partners in the region.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, the Philippines will likely continue its assertive diplomatic stance regarding the South China Sea, particularly concerning Scarborough Shoal. The "war of words" with China is expected to persist, with both sides reiterating their claims and legal positions. As the ASEAN Chair, the Philippines will intensify efforts to advance the Code of Conduct (COC) negotiations with China and other ASEAN members, aiming for tangible progress by year-end. Military activities with the United States and other allies (Japan, Australia) are set to increase in tempo and complexity, with upcoming phases of exercises like Salaknib. This will involve more joint patrols and integrated defense drills, further enhancing interoperability and collective deterrence in the West Philippine Sea. The domestic focus will remain on the legal proceedings involving former President Duterte, which could have political ramifications. Cybersecurity threats, especially from state-sponsored actors, will continue to be a high-priority concern, with ongoing investigations into breaches and legislative pushes for stronger cyber laws.

Critical flashpoints and risk areas: The South China Sea remains the primary flashpoint. Any further aggressive actions by China's coast guard or maritime militia against Philippine vessels, particularly around Scarborough Shoal or Second Thomas Shoal, could rapidly escalate tensions. The increased presence of US and allied military assets, while intended for deterrence, also raises the risk of accidental encounters or miscalculations with Chinese forces. The ongoing cyberattacks against Philippine government infrastructure, particularly those linked to geopolitical tensions, pose a significant risk to national security and critical services. The domestic political landscape, especially concerning the high-profile arrest of former President Duterte, could lead to internal instability or protests, diverting attention and resources from external security challenges.

Indicators to monitor: Key indicators to monitor include the progress and tone of COC negotiations in the South China Sea; the frequency and nature of maritime incidents between Philippine and Chinese vessels; the scale, location, and participants of upcoming joint military exercises with the US and other allies; the passage and implementation of new anti-espionage and cybersecurity legislation; and any significant developments in the ICC case against former President Duterte. Additionally, statements from Philippine and Chinese officials regarding bilateral relations and regional security will provide insights into diplomatic trajectories.

Strategic recommendations: The Philippines should continue to diversify and strengthen its security partnerships beyond the traditional US alliance, actively engaging with other regional powers like Japan, Australia, and the EU to build a broader coalition for a rules-based international order. Investing in indigenous defense capabilities, particularly in maritime domain awareness, air defense, and cybersecurity, is crucial to reduce reliance on external partners and enhance self-reliance. Expediting the passage of modern anti-espionage and cybersecurity laws is paramount to protect critical infrastructure and sensitive information from foreign malign influence and cyber threats. Diplomatically, Manila should leverage its ASEAN chairmanship to foster greater regional unity and a common approach to the South China Sea, while maintaining open communication channels with Beijing to manage potential escalations. Internally, ensuring the integrity of the justice system and upholding human rights will be vital for national cohesion and international standing.

Sources

• moderndiplomacy.eu
• chinaglobalsouth.com
• freemalaysiatoday.com
• wikipedia.org
• mb.com.ph
• hrw.org
• pna.gov.ph
• gmanetwork.com
• cyberpress.org
• pna.gov.ph
• pna.gov.ph
• mexc.com
• mb.com.ph
• youtube.com
• inquirer.net
• tribune.net.ph
• ipdefenseforum.com
• abs-cbn.com
• politiko.com.ph
• ianslive.in
• manilatimes.net
• wsws.org
• state.gov
• visiontimes.com
• scmp.com
• pna.gov.ph