Cyber ​​Security Hub

ServiceNow has long been a familiar platform for many large enterprises and organizations in managing Information Technology Service Management (ITSM) as well as operating internal workflows. However, a recently published threat intelligence report reveals that this platform is facing a critical security vulnerability, raising major concerns about information security in Software as a Service (SaaS) cloud environments.

A newly discovered campaign named Operation TaxShadow has been observed leveraging phishing emails impersonating tax authorities to trick Windows users into downloading dangerous malware. Remarkably, this malware operates entirely within the system memory, leaving minimal digital footprints and making detection and prevention extremely difficult.

Discover essential cyber security measures to prevent data risks. Explore comprehensive 24/7 NOC/SOC protection strategies from IPSIP experts.

Following the previous two vulnerabilities, BlueHammer and RedSun, researcher Chaotic Eclipse has just publicized two new flaws named YellowKey and GreenPlasma, directly threatening the Windows security ecosystem and BitLocker encryption.

A dangerous phishing campaign is currently targeting Android operating system users in Europe. Threat actors are exploiting the GitHub platform to distribute fake updates of reputable banking applications, embedding a malware strain named NFCShare to steal victims' assets.

When the Law on Cyber Security 2025 officially takes effect on 1st July, 2026, many seemingly harmless online habits of users will be strictly regulated to build a safer and more civilized digital environment.

A severe security vulnerability is being actively exploited by cybercriminals to infiltrate corporate networks without requiring valid user passwords.

Detailed report on Microsoft's June 2026 periodic security updates addressing over 200 system flaws, including 3 critical zero-days threatening BitLocker, HTTP/2, and Windows.

Google has rolled out one of its largest security patch bundles ever for the Chrome browser. Users worldwide, from individuals to large enterprises, are strongly advised to update immediately to defend their systems against a wide array of cyber threats.

Hackers are using fake ticket websites, malicious livestreams, impersonation accounts, and scam applications to exploit the passion of global fans and gaps in corporate security.

Effective July 1, 2026, the new regulations of the 2025 Cybersecurity Law will officially come into force, bringing major changes to the obligations of organizations and businesses.

Explore what happened last week in cybersecurity: 21 AI-found zero-days, Microsoft & Cisco flaws, Meta AI hijacks, and the FIFA World Cup scams. Read now!

CISA has issued an urgent warning regarding a newly patched, high-severity vulnerability within SolarWinds Serv-U. Cybercriminals are actively exploiting this flaw in the wild, with the primary intent of crashing enterprise servers.

Why are experts advising you to replace passwords with PINs and Passkeys? Discover the superior security benefits and real-world challenges of this shift.