top of page
Cyber Security Hub
Stay updated with the latest news on technology, cybersecurity, market reports
Featured News
Cybersecurity Weekly News (October 26 – November 1): Cross-Border Fraud, Hospital Ransomware, and Active Node2Shell Exploitation
Cybersecurity weekly news for October 26 – November 1: cross-border fraud in Vietnam, data security regulation, hospital ransomware, Node2Shell exploitation, and new cyber incidents worldwide.
2 hours ago
Cybersecurity Weekly News (October 19–25): AI agents automate attacks, PHP flaws face mass exploitation, and bank brandname SMS scams rise
Cybersecurity weekly news for October 19–25: AI Agents automate attacks, PHP flaws face mass exploitation, bank SMS scams rise, and financial and healthcare data breaches remain in focus.
Oct 26
Cybersecurity Weekly News (October 12–18): Microsoft-Abused Phishing, “Online Kidnapping” Scams, and Hackers Taking Control of Refrigeration Systems
Cybersecurity weekly news for October 12–18, 2026: Microsoft-based phishing, online kidnapping scams, OT/IoT attacks in France, AI risks and BeyondTrust vulnerabilities.
Oct 19
Optimizing IT risk management with in-depth Information Security GRC solutions
Information security GRC is increasingly becoming a critical part of IT governance strategy, helping align governance, risk, and compliance requirements into a unified model.
Aug 25
Network maintenance for Startups: In-house or Outsourced?
Learn what a startup network maintenance solution should include, how to choose the right support model, and what to look for in a service provider.
Jul 25
Financial sector cybersecurity 2026: Decoding 6 cyberattack trends and proactive defense strategies
Decode 6 financial sector cybersecurity trends in 2026 from Darktrace & Visa. Discover how to combat ransomware and phishing with a 24/7 SOC platform from IPSIP experts!
Jul 7
5 digital habits you must break in the AI era before you get hacked
The ground rules of cybersecurity have changed, and it is time to dismantle outdated digital habits to keep our personal and enterprise assets secure.
3 days ago
PHP2Shell and the latest PHP vulnerabilities: Is patching enough to keep businesses safe?
PHP2Shell and new PHP vulnerabilities can lead to RCE. Even after patching, businesses should verify runtimes and assess remaining security risks.
3 days ago
AI Voice Cloning Scam Tricks Italian Bank Into Transferring €95 Million
Fraudsters used AI voice cloning, fake CEO messages and forged documents to convince Fideuram to transfer €95 million overseas.
6 days ago
24H movement
The HOCMAI hack incident: Warning of 7 million leaked data records and immediate actions to take
Recently, cyberspace has been buzzing with news that the online education platform HOCMAI was hacked, raising concerns about the information security of millions of students. Below is a comprehensive overview of the incident and the urgent solutions users need to implement to protect themselves.
21 minutes ago
Binance investigates cyberattack affecting $6.3 billion in crypto assets
Binance investigates a cyberattack affecting $6.3 billion in crypto assets, raising concerns about compromised engineer devices and privileged access security.
3 days ago
C3RB3R Ransomware targets synology NAS: Signs, patches and recovery
C3RB3R ransomware is targeting Synology NAS. Review confirmed findings, .L0CK3D warning signs, DSM patch thresholds and recovery precautions.
3 days ago
All posts
Over 92,000 malware detections impersonated ChatGPT and other AI services in early 2026
Kaspersky recorded over 92,000 malware and PUA detections disguised as ChatGPT, Claude and Gemini in early 2026, highlighting growing AI impersonation risks.
Aug 25
Alarm: AI behind nearly half of cyberattacks in Vietnam
In the first half of 2026, Vietnam's information security landscape recorded a concerning shift as artificial intelligence (AI) began directly participating in intrusion and data theft activities.
Aug 24
Mandatory information security assessment organization: Vendor selection criteria
mandatory-information-security-assessment-organization, enterprise cybersecurity audit, system security assessment services
Aug 24
From Deepfakes to WhatsApp: inside a $187 million investment fraud network
GoldBull and CoinLure use deepfakes, WhatsApp and fake investment platforms in a fraud ecosystem estimated at over $187 million.
Aug 24
Alert: Hackers can now bypass MFA without using malware
By tampering with the login process, attackers gained access to the mailbox and redirected vendor payments. Notably, this campaign used no malware, infostealers, or remote access tools on the victim's device.
Aug 21
Over 3.7 million patients impacted in CareCloud data breach
The CareCloud data breach – involving a U.S.-listed healthcare technology solutions provider – is turning into one of the largest healthcare data breaches of 2026.
Aug 21
Attackers can modify or delete GitLab projects without logging In
GitLab patched CVE-2026-19478, a CVSS 9.4 GraphQL flaw that can allow unauthenticated attackers to modify or delete public projects remotely.
Aug 21
Fortinet acquires Virtue AI to Expand Security from Networks to AI Agents
Fortinet acquires Virtue AI to extend continuous AI protection with red teaming, runtime guardrails and AI Agent governance for enterprise environments.
Aug 20
CISA issues emergency warning on Windows IKE flaw allowing remote control takeover
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency alert regarding a critical security vulnerability in the Windows operating system.
Aug 20
Apple releases new security updates: Patching dozens of vulnerabilities across macOS, iOS, and iPadOS
Apple has officially rolled out new security updates for Mac, iPhone, and iPad devices. This release addresses dozens of system vulnerabilities, most of which are tied to WebKit - the company's web browser engine.
Aug 20
TheHatman claims 3.64 million Azure/Entra records: what should businesses know?
TheHatman claims to be selling 3.64 million records allegedly taken from Azure/Entra environments at nine major companies. Here is what businesses should know.
Aug 20
Jewelbug's multi-target attack campaign: When professional hackers scam crypto using AI
We often classify hackers into two distinct groups: cyber spies targeting state secrets on one side, and cybercriminals seeking financial gain on the other. However, a threat actor group known as Jewelbug (believed to be based in China) represents a unique exception.
Aug 19
Time for a change: When Active Directory is no longer enough to protect your enterprise
Although many organizations have moved most of their applications, devices, and operational workflows to the cloud, their identity management systems remain "bound" to on-premises Active Directory.
Aug 19
DeadLock changes how ransomware operates with blockchain
DeadLock uses Polygon blockchain and decentralized infrastructure to support extortion operations. Microsoft says over 80 organizations were listed by July 2026.
Aug 19
2026 Managed Services trends: Why IT infrastructure must align with enterprise cybersecurity
In 2026, the boundary between IT infrastructure management and enterprise cybersecurity is increasingly blurred. Cloud, SaaS, endpoints, digital identity, virtualization platforms, and AI tools have all become part of the same operational environment.
Aug 18
bottom of page