top of page
Cyber Security Hub
Stay updated with the latest news on technology, cybersecurity, market reports
Featured News
Cybersecurity Weekly News (October 26 – November 1): Cross-Border Fraud, Hospital Ransomware, and Active Node2Shell Exploitation
Cybersecurity weekly news for October 26 – November 1: cross-border fraud in Vietnam, data security regulation, hospital ransomware, Node2Shell exploitation, and new cyber incidents worldwide.
2 hours ago
Cybersecurity Weekly News (October 19–25): AI agents automate attacks, PHP flaws face mass exploitation, and bank brandname SMS scams rise
Cybersecurity weekly news for October 19–25: AI Agents automate attacks, PHP flaws face mass exploitation, bank SMS scams rise, and financial and healthcare data breaches remain in focus.
Oct 26
Cybersecurity Weekly News (October 12–18): Microsoft-Abused Phishing, “Online Kidnapping” Scams, and Hackers Taking Control of Refrigeration Systems
Cybersecurity weekly news for October 12–18, 2026: Microsoft-based phishing, online kidnapping scams, OT/IoT attacks in France, AI risks and BeyondTrust vulnerabilities.
Oct 19
Optimizing IT risk management with in-depth Information Security GRC solutions
Information security GRC is increasingly becoming a critical part of IT governance strategy, helping align governance, risk, and compliance requirements into a unified model.
Aug 25
Network maintenance for Startups: In-house or Outsourced?
Learn what a startup network maintenance solution should include, how to choose the right support model, and what to look for in a service provider.
Jul 25
Financial sector cybersecurity 2026: Decoding 6 cyberattack trends and proactive defense strategies
Decode 6 financial sector cybersecurity trends in 2026 from Darktrace & Visa. Discover how to combat ransomware and phishing with a 24/7 SOC platform from IPSIP experts!
Jul 7
5 digital habits you must break in the AI era before you get hacked
The ground rules of cybersecurity have changed, and it is time to dismantle outdated digital habits to keep our personal and enterprise assets secure.
3 days ago
PHP2Shell and the latest PHP vulnerabilities: Is patching enough to keep businesses safe?
PHP2Shell and new PHP vulnerabilities can lead to RCE. Even after patching, businesses should verify runtimes and assess remaining security risks.
3 days ago
AI Voice Cloning Scam Tricks Italian Bank Into Transferring €95 Million
Fraudsters used AI voice cloning, fake CEO messages and forged documents to convince Fideuram to transfer €95 million overseas.
6 days ago
24H movement
The HOCMAI hack incident: Warning of 7 million leaked data records and immediate actions to take
Recently, cyberspace has been buzzing with news that the online education platform HOCMAI was hacked, raising concerns about the information security of millions of students. Below is a comprehensive overview of the incident and the urgent solutions users need to implement to protect themselves.
20 minutes ago
Binance investigates cyberattack affecting $6.3 billion in crypto assets
Binance investigates a cyberattack affecting $6.3 billion in crypto assets, raising concerns about compromised engineer devices and privileged access security.
3 days ago
C3RB3R Ransomware targets synology NAS: Signs, patches and recovery
C3RB3R ransomware is targeting Synology NAS. Review confirmed findings, .L0CK3D warning signs, DSM patch thresholds and recovery precautions.
3 days ago
All posts
Ransomware could disrupt systems serving millions of users for days
A warning on August 24, 2026 highlights how ransomware can disrupt services for days without continuous monitoring, isolated backups, and tested recovery plans.
Aug 31
Warning: Over 4,500 businesses fall victim to Mirage2FA phishing campaign targeting Microsoft 365
Directly targeting Microsoft 365 services, the sophisticated phishing kit Mirage2FA does not stop at stealing passwords – it also hijacks login session "keys." As a result, hackers can open the doors wide to corporate systems without worrying about the two-factor authentication (2FA) layer.
Aug 28
ToxicPanda 2.0 malware: New tactics blocking Google Play and abusing wireless ADB on Android
ToxicPanda malware on Android OS has upgraded to a new version featuring network traffic control and automated deep device takeover capabilities.
Aug 28
Palo Alto GlobalProtect hit by 5 vulnerabilities, enterprises should check now
Five Palo Alto GlobalProtect vulnerabilities were disclosed; two issues under CVE-2026-0251 can let low-privileged users gain SYSTEM or root access.
Aug 28
IPSIP Vietnam attends HCMC K-Brand Expo 2026, expanding Vietnam - Korea business and technology connections
IPSIP Vietnam attended HCMC K-Brand Expo 2026 in Ho Chi Minh City on August 27, connecting with South Korean businesses and expanding opportunities for collaboration in technology, cybersecurity, and IT.
Aug 28
Real-world DDoS attack incident response case study
Explore a real-world DDoS incident response case in Vietnam, from detection and mitigation to recovery, SOC monitoring, and long-term defense.
Aug 27
Microsoft impersonating scam: Fake security scans, real data loss
Recently, information security experts have discovered a sophisticated phishing campaign masquerading as security scanning websites impersonating Microsoft.
Aug 27
SilkParasite cyber espionage campaign targets central Asian government agencies
SilkParasite targets Central Asian government agencies using spear-phishing, DLL sideloading, seven RAT families and Google Drive-based command-and-control.
Aug 27
Risk of losing business accounts using only a phone number: Lessons from the Tata Nexarc incident
Armed only with a registered phone number, an attacker could easily gain control of accounts on Tata Nexarc - a B2B procurement platform connecting small and medium-sized enterprises (SMEs) with construction material and steel suppliers in India.
Aug 27
Weedhack malware traps Minecraft gamers via fake websites and SEO poisoning
Cybersecurity analysts have recently discovered a large-scale malware distribution campaign targeting the gaming community directly.
Aug 26
Claude Mythos 5 Powers Vulnerability Scanning in Claude Security
Anthropic is using Claude Mythos 5 in Claude Security to scan source code, classify CWE findings, assess severity, and suggest fixes with human approval.
Aug 26
Critical Keycloak vulnerability enables remote account takeover: What you need to know
A newly discovered vulnerability in Keycloak allows remote attackers to take over any account on the system without requiring user interaction or valid credentials.
Aug 26
Optimizing IT risk management with in-depth Information Security GRC solutions
Information security GRC is increasingly becoming a critical part of IT governance strategy, helping align governance, risk, and compliance requirements into a unified model.
Aug 25
Decree 333/2026/ND-CP takes effect: what businesses need to know about cybersecurity compliance
Decree 333/2026/ND-CP took effect on August 19, 2026, introducing requirements on account verification, information disclosure, content handling and system log retention.
Aug 25
Critical GitLab vulnerability actively exploited: Severe risk to the supply chain
Just days after being publicly disclosed, a critical security vulnerability in the GitLab platform has rapidly been targeted by attackers.
Aug 25
bottom of page