top of page
Cyber Security Hub
Stay updated with the latest news on technology, cybersecurity, market reports
Featured News
Cybersecurity Weekly News (October 26 – November 1): Cross-Border Fraud, Hospital Ransomware, and Active Node2Shell Exploitation
Cybersecurity weekly news for October 26 – November 1: cross-border fraud in Vietnam, data security regulation, hospital ransomware, Node2Shell exploitation, and new cyber incidents worldwide.
4 hours ago
Cybersecurity Weekly News (October 19–25): AI agents automate attacks, PHP flaws face mass exploitation, and bank brandname SMS scams rise
Cybersecurity weekly news for October 19–25: AI Agents automate attacks, PHP flaws face mass exploitation, bank SMS scams rise, and financial and healthcare data breaches remain in focus.
Oct 26
Cybersecurity Weekly News (October 12–18): Microsoft-Abused Phishing, “Online Kidnapping” Scams, and Hackers Taking Control of Refrigeration Systems
Cybersecurity weekly news for October 12–18, 2026: Microsoft-based phishing, online kidnapping scams, OT/IoT attacks in France, AI risks and BeyondTrust vulnerabilities.
Oct 19
Optimizing IT risk management with in-depth Information Security GRC solutions
Information security GRC is increasingly becoming a critical part of IT governance strategy, helping align governance, risk, and compliance requirements into a unified model.
Aug 25
Network maintenance for Startups: In-house or Outsourced?
Learn what a startup network maintenance solution should include, how to choose the right support model, and what to look for in a service provider.
Jul 25
Financial sector cybersecurity 2026: Decoding 6 cyberattack trends and proactive defense strategies
Decode 6 financial sector cybersecurity trends in 2026 from Darktrace & Visa. Discover how to combat ransomware and phishing with a 24/7 SOC platform from IPSIP experts!
Jul 7
5 digital habits you must break in the AI era before you get hacked
The ground rules of cybersecurity have changed, and it is time to dismantle outdated digital habits to keep our personal and enterprise assets secure.
3 days ago
PHP2Shell and the latest PHP vulnerabilities: Is patching enough to keep businesses safe?
PHP2Shell and new PHP vulnerabilities can lead to RCE. Even after patching, businesses should verify runtimes and assess remaining security risks.
3 days ago
AI Voice Cloning Scam Tricks Italian Bank Into Transferring €95 Million
Fraudsters used AI voice cloning, fake CEO messages and forged documents to convince Fideuram to transfer €95 million overseas.
6 days ago
24H movement
The HOCMAI hack incident: Warning of 7 million leaked data records and immediate actions to take
Recently, cyberspace has been buzzing with news that the online education platform HOCMAI was hacked, raising concerns about the information security of millions of students. Below is a comprehensive overview of the incident and the urgent solutions users need to implement to protect themselves.
2 hours ago
Binance investigates cyberattack affecting $6.3 billion in crypto assets
Binance investigates a cyberattack affecting $6.3 billion in crypto assets, raising concerns about compromised engineer devices and privileged access security.
3 days ago
C3RB3R Ransomware targets synology NAS: Signs, patches and recovery
C3RB3R ransomware is targeting Synology NAS. Review confirmed findings, .L0CK3D warning signs, DSM patch thresholds and recovery precautions.
3 days ago
All posts
Coldcard hardware wallet vulnerability: Hackers steal over $130 million in cryptocurrency
A critical security vulnerability has recently left many Coldcard wallet users completely drained of their assets, with total losses surpassing $130 million in cryptocurrency.
Aug 5
What Is PENTEST? A guide to system Penetration Testing for businesses
What is PENTEST? Learn about system penetration testing, testing types, processes, reports, costs, and key considerations for businesses in Vietnam.
Aug 5
SonicWall SMA1000 vulnerabilities exploited in attacks, raising ransomware risk
SonicWall SMA1000 flaws CVE-2026-15409 and CVE-2026-15410 are being exploited to gain root access, increasing ransomware and data breach risks.
Aug 5
The Recovery Scam: When cybercrime victims become secondary targets
Capitalizing on victims' anxiety and their desperate desire to recover lost assets, cybercriminals turn them into prime targets in a new fraud chain known as a Recovery Scam.
Aug 4
An overview of the most popular cybersecurity frameworks worldwide
A cybersecurity framework provides a structured system of principles, desired outcomes, or controls to help businesses manage security risks.
Aug 4
Crucial cybersecurity tips for small business owners
Learn practical cybersecurity tips to help small businesses protect accounts, devices, data, and employees from common cyber threats.
Aug 4
Arch Linux disables AUR package adoption following malware campaign
Arch Linux has temporarily disabled AUR package adoption after attackers abused orphaned packages to distribute malware. Here's what happened and why it matters.
Aug 4
Breakthrough AI application: Google discovers 13-year-old Chrome vulnerability and sets new patching record
Google recently confirmed that its AI implementation has achieved record-breaking patch delivery speeds, even discovering a critical vulnerability that had remained hidden for 13 years within the Chrome codebase.
Aug 3
IT Support Levels explained: Understanding L1, L2 and L3 support
Learn how IT Support Levels (L1, L2, and L3) differ, what each level is responsible for, and how an effective escalation process helps businesses resolve IT issues faster.
Aug 3
Chaos ransomware through Microsoft Teams encrypted a network in just 17 hours
STAC4749 impersonated IT support staff through Microsoft Teams to gain remote access and deploy Chaos ransomware in less than 17 hours. Here's what organizations need to know.
Aug 3
CosmosEscape flaw threatens the Azure Cosmos DB platform
CosmosEscape – a critical security vulnerability in Microsoft's Azure Cosmos DB database service allows attackers to bypass authorization barriers, conduct cross-tenant interactions between user accounts, and threaten data security on a global scale.
Jul 31
Russian threat group exploits Microsoft OWA vulnerability: The emergence of sophisticated malware OWAReaper
A dangerous cyber attack campaign targeting Microsoft Outlook Web Access (OWA) systems has recently been discovered, directly threatening government agencies in the US and Europe.
Jul 31
Prompt Injection: Hackers hide malicious instructions to manipulate enterprise AI
This technique is known as indirect prompt injection. Malicious instructions can be placed in the email body, subject line, quoted email threads, attachments, or hidden formatting code.
Jul 31
Breaking: Claude chat logs exposed publicly on Google - Who is to blame?
A recent security incident involving Claude has sent shockwaves through the tech community, as a vast amount of private user data was unexpectedly indexed and exposed publicly by Google Search.
Jul 30
VMSA-2026-0006: Up to 3 VMware vulnerabilities are rated as "Critical"
Broadcom has officially released VMware Security Advisory (VMSA-2026-0006) to urgently address 5 vulnerabilities across several of its software product lines. Notably, up to 3 vulnerabilities are rated as "Critical".
Jul 30
bottom of page