Cyber ​​Security Hub

A sophisticated voice phishing (vishing) campaign is directly targeting Microsoft 365 users. Notably, attackers are exploiting the recent wave of security upgrades to turn them into a perfect trap for hijacking corporate accounts.

The cybersecurity community recently witnessed a remarkable turning point as artificial intelligence (AI) executed a cyberattack entirely on its own.

ERP AI can accelerate software development, but it cannot replace a proven ERP platform. Learn the risks and best practices for securing enterprise systems with IPSIP Vietnam.

Microsoft Teams is being abused to impersonate IT support and deliver EtherRAT malware. Learn how the attack works and how businesses can respond.

The irresistible allure of ChatGPT artificial intelligence is becoming prime bait for cybercriminal groups to exploit. Security researchers have recently exposed a sophisticated campaign in which attackers hijack numerous Facebook pages and accounts with large followings for the purpose of phishing and distributing malware to users.

SharePoint vulnerability CVE-2026-45659 has been added to CISA's KEV catalog after active exploitation. Learn about the RCE risk, ransomware threats, and how IPSIP helps secure your systems.

A new report from SOCRadar confirms that the FortiBleed campaign has resulted in 409 compromised FortiGate administrator accounts, 354 successful intrusions, and at least 12 confirmed ransomware incidents. This marks the first time technical evidence has directly linked FortiBleed to the ransomware operations of the INC and Lynx groups.

Evaluate Pentest and SOC quotations confidently with this insider guide. Learn how to compare technical scope, pricing, standards, and hidden costs before choosing a cybersecurity provider.

Researchers have uncovered ARToken, a phishing toolkit abusing Microsoft 365 OAuth Device Code Flow to steal access tokens without passwords. Learn how it works and how to stay protected

The rapid evolution of Artificial Intelligence (AI) is completely reshaping the cybersecurity landscape, bringing both unprecedented opportunities and challenges.

A vulnerability affecting Apple's Hide My Email feature could allow attackers to uncover the real email address behind an anonymized alias. According to reports, the issue was disclosed to Apple more than a year ago but remains unpatched. Independent testing by 404 Media also confirmed that the flaw was still exploitable at the time of publication.

Transferring images, videos, or documents between phones and computers has now become incredibly simple thanks to AirDrop on Apple devices or Quick Share on Android and Windows operating systems. However, this very convenience is inadvertently opening a loophole for cyberattacks, threatening the safety of more than 5 billion devices worldwide.

Instead of planting malware directly, the attacker cleverly inserts hidden instructions to trick autonomous AI assistants like Claude Code into automatically triggering remote destructive commands. This vulnerability is the clearest evidence of the dangers of Shadow AI.

Nissan has confirmed that current and former employee data may have been accessed after attackers exploited the Oracle PeopleSoft zero-day vulnerability, CVE-2026-35273. According to Oracle, the campaign affected hundreds of companies, while Mandiant said it notified more than 100 organizations impacted by the attacks.

Một lỗ hổng CVE nghiêm trọng trong Microsoft Excel đang được cảnh báo vì có thể bị khai thác thông qua tệp bảng tính độc hại. Theo thông tin từ Microsoft và các nguồn cảnh báo bảo mật, lỗ hổng được định danh là CVE-2025-60727, thuộc nhóm thực thi mã từ xa trong hệ sinh thái Office.

The excitement of the World Cup 2026 finals is not only electrifying football pitches but has also become the focal point of large-scale cybersecurity operations.

The latest security reports show that international cybercrime organizations had quietly constructed, orchestrated, and deployed a massive phishing infrastructure months before the opening whistle blew.

Security researchers from Mozilla's Zero Day Investigative Network (0DIN) have uncovered a sophisticated attack technique that targets AI coding agents through seemingly clean GitHub repositories.

A severe cyberattack targeting an Apple manufacturing partner in India has resulted in a massive breach of internal data.

Since April 2026, a sophisticated phishing campaign has been targeting hotels across Asia and Europe. The attackers abuse trusted services including Calendly and Google to distribute a ZIP archive containing the TonRAT malware, which is executed through the legitimate Node.js v24.13.0 runtime