NCSA Urges Immediate Update to iOS 18.6.2 and iPadOS 18.6.2 Following Discovery of Critical Vulnerability

The National Cyber Security Agency (NCSA) of Thailand has issued an urgent advisory for all users of iPhone and iPad devices to promptly update to iOS 18.6.2 and iPadOS 18.6.2, following the identification of a critical security vulnerability tracked as CVE-2025-43300 within Apple’s ImageIO Framework. This vulnerability, classified as a zero-day, has reportedly been exploited in targeted attacks. According to Apple’s official security […]

Outsourcing Without Oversight: PDPA Penalties Hit Healthcare Sector

On August 1, 2025, Thailand’s Personal Data Protection Committee (PDPC) issued a formal statement regarding a serious data breach involving a prominent private hospital. The incident has sparked widespread attention across social media and raised concerns about data governance in the healthcare sector. Incident Overview The hospital, acting as the Data Controller, had outsourced the […]

How attackers are still phishing “phishing-resistant” authentication

🔐 Overview Despite the rise in phishing‑resistant authentication methods such as FIDO2-based passkeys, WebAuthn, Windows Hello, and physical security keys attackers continue to successfully bypass them using more sophisticated phishing techniques. 🧪 Attack Techniques Used 1. Downgrade Attacks 2. Device‑Code Phishing 3. Consent Phishing (OAuth Abuse) ⚖️ Why These Methods Still Work ✅ Mitigation Strategies […]

Thailand Under Siege: What the Latest Cyber Attacks Mean for All of Us

I’ve been following cybersecurity news for years, but what’s happening in Thailand right now has me genuinely concerned. It’s not just another data breach or ransomware story – this feels different, more targeted, and frankly, more dangerous. What’s Really Going Down in Thailand Since March, Thai government systems have been getting absolutely pounded by hackers. […]

Thailand’s Employee Welfare Fund 2025: What Employers Need to Know

Starting October 1, 2025, Thailand will officially launch the Employee Welfare Fund (EWF) — a major
step forward in protecting workers’ financial well-being. After years of delay, this mandatory fund, grounded in the Labour Protection Act B.E. 2541 (1998), is now set in motion following a royal decree and regulations passed in late 2024

16 billion passwords exposed in record-breaking data breach

The massive excitement around Artificial Intelligence (AI) tools has become a goldmine for cybercriminals. They’re heavily using this buzz to trick people into downloading dangerous ransomware and malware. This isn’t just a tactic for highly advanced hackers anymore; even smaller, lesser-known groups are now effectively using this strategy. These malicious actors, including ransomware gangs like […]

How Hiring Managers Can Detect Resume Fraud: A Professional Guide

Resume fraud has become an increasingly pressing concern for HR professionals and hiring managers. Recent studies reveal that this issue is more pervasive than many organizations realize, with significant implications for hiring quality and workplace integrity. Understanding how to identify and prevent resume fraud is crucial for maintaining effective recruitment processes. The Growing Problem of […]