top of page
Cyber Security Hub
Stay updated with the latest news on technology, cybersecurity, market reports
Featured News


Cybersecurity Weekly News (October 26 – November 1): Cross-Border Fraud, Hospital Ransomware, and Active Node2Shell Exploitation
Cybersecurity weekly news for October 26 – November 1: cross-border fraud in Vietnam, data security regulation, hospital ransomware, Node2Shell exploitation, and new cyber incidents worldwide.
17 hours ago


Cybersecurity Weekly News (October 19–25): AI agents automate attacks, PHP flaws face mass exploitation, and bank brandname SMS scams rise
Cybersecurity weekly news for October 19–25: AI Agents automate attacks, PHP flaws face mass exploitation, bank SMS scams rise, and financial and healthcare data breaches remain in focus.
Oct 26


Cybersecurity Weekly News (October 12–18): Microsoft-Abused Phishing, “Online Kidnapping” Scams, and Hackers Taking Control of Refrigeration Systems
Cybersecurity weekly news for October 12–18, 2026: Microsoft-based phishing, online kidnapping scams, OT/IoT attacks in France, AI risks and BeyondTrust vulnerabilities.
Oct 19


Optimizing IT risk management with in-depth Information Security GRC solutions
Information security GRC is increasingly becoming a critical part of IT governance strategy, helping align governance, risk, and compliance requirements into a unified model.
Aug 25


Network maintenance for Startups: In-house or Outsourced?
Learn what a startup network maintenance solution should include, how to choose the right support model, and what to look for in a service provider.
Jul 25


Financial sector cybersecurity 2026: Decoding 6 cyberattack trends and proactive defense strategies
Decode 6 financial sector cybersecurity trends in 2026 from Darktrace & Visa. Discover how to combat ransomware and phishing with a 24/7 SOC platform from IPSIP experts!
Jul 7


5 digital habits you must break in the AI era before you get hacked
The ground rules of cybersecurity have changed, and it is time to dismantle outdated digital habits to keep our personal and enterprise assets secure.
4 days ago


PHP2Shell and the latest PHP vulnerabilities: Is patching enough to keep businesses safe?
PHP2Shell and new PHP vulnerabilities can lead to RCE. Even after patching, businesses should verify runtimes and assess remaining security risks.
4 days ago


AI Voice Cloning Scam Tricks Italian Bank Into Transferring €95 Million
Fraudsters used AI voice cloning, fake CEO messages and forged documents to convince Fideuram to transfer €95 million overseas.
7 days ago
24H movement


The HOCMAI hack incident: Warning of 7 million leaked data records and immediate actions to take
Recently, cyberspace has been buzzing with news that the online education platform HOCMAI was hacked, raising concerns about the information security of millions of students. Below is a comprehensive overview of the incident and the urgent solutions users need to implement to protect themselves.
16 hours ago


Binance investigates cyberattack affecting $6.3 billion in crypto assets
Binance investigates a cyberattack affecting $6.3 billion in crypto assets, raising concerns about compromised engineer devices and privileged access security.
4 days ago


C3RB3R Ransomware targets synology NAS: Signs, patches and recovery
C3RB3R ransomware is targeting Synology NAS. Review confirmed findings, .L0CK3D warning signs, DSM patch thresholds and recovery precautions.
4 days ago
All posts


Malware Spread Through Recruitment Documents Compromised More Than 12,000 Computers
Attackers used recruitment and advertising documents to distribute malware, compromising more than 12,000 computers across over 90 countries.
Sep 22


ToxicPanda 2.0 malware: New tactics blocking Google Play and abusing wireless ADB on Android
ToxicPanda malware on Android OS has upgraded to a new version featuring network traffic control and automated deep device takeover capabilities.
Aug 28


Warning: New attack technique enables malware to hijack Google Passkey authentication keys
Cybersecurity experts have recently uncovered a new attack technique called "Pass-ta-key," which enables malware to compromise and hijack accounts even when secured by Passkeys.
Aug 6


Russian threat group exploits Microsoft OWA vulnerability: The emergence of sophisticated malware OWAReaper
A dangerous cyber attack campaign targeting Microsoft Outlook Web Access (OWA) systems has recently been discovered, directly threatening government agencies in the US and Europe.
Jul 31


ClickLock malware on macOS forces users to enter passwords
ClickLock uses a fake Cloudflare verification page, locks macOS applications, and forces victims to enter passwords to steal data, crypto wallets, and accounts.
Jul 22


How hackers turned government websites into malware distribution tools
Trusting official government domains or vetted emails is a common habit for many internet users. However, the hackers behind the dangerous campaign dubbed PhantomEnigma are turning this very trust into a sophisticated attack tool.
Jul 17


Risk of card data theft: NFCShare malware spreads via fake banking updates on GitHub
A dangerous phishing campaign is currently targeting Android operating system users in Europe. Threat actors are exploiting the GitHub platform to distribute fake updates of reputable banking applications, embedding a malware strain named NFCShare to steal victims' assets.
Jun 10


Beware of fake VssID app designed to steal user assets
Vietnam Social Security (VSS) has just issued an urgent warning regarding a new tech-driven scam. Authorities have detected malicious actors distributing a fraudulent app that impersonates the official "VssID - Digital Social Security" platform to trap mobile users.
May 26


Beware of fake WhatsApp versions containing surveillance malware
In its latest move to protect user privacy, WhatsApp has issued an urgent warning to hundreds of users regarding the emergence of a fraudulent application.
Apr 3


RondoDox Botnet on the Rise: Exploiting Hundreds of CVEs to Launch Large-Scale DoS/DDoS Attacks
The emergence of RondoDox highlights a concerning trend: attackers are increasingly leveraging unpatched, known vulnerabilities to build powerful attack infrastructures, rather than relying solely on zero-day exploits.
Mar 17


KarstoRAT: New Modular RAT Malware Sophisticatedly Disguising as Security Traffic
In a landscape where cyberattacks are becoming increasingly sophisticated, the emergence of KarstoRAT – a modular Remote Access Trojan – is raising significant alarms within the cybersecurity community. The most terrifying aspect of KarstoRAT lies not only in its data theft capabilities but in its technique of "perfectly hiding" under the guise of legitimate security software. What is KarstoRAT - New Modular RAT Malware? Incredible "Stealth" Capabilities KarstoRAT is a newly
Feb 26
bottom of page
