WithSecure Elements
Endpoint protection, EDR/XDR and exposure management for growing businesses.
Insights
Practical cybersecurity, AI and app development guidance for organisations in the Philippines and worldwide, from the ARA Industries team.
Browse by topic
Threat Watch PH
Scams, phishing and live incidents hitting Filipino users and organisations.
Ransomware & Incident Response
How ransomware gets in, what downtime costs, and how to recover.
Cybersecurity Solutions
Practical security for teams or organizations of 20 to 500 people.
AI & Workflow Automation
Where AI and automation actually save time, and how to do it safely.
Web & Mobile Apps
Scoping, platforms and infrastructure for web, mobile and eCommerce builds.
Data Privacy & Compliance
DPA, NPC and sector rules turned into controls you can run.
Schools & Education
For schools planning campus security and student-data privacy.
All articles
Cybersecurity Solutions
Old KYC Systems Still Hold Customer IDs: Lessons From a Fintech Incident
Moneybees has told affected customers that KYC records were taken through a legacy system. Here is what the notice says, what ID holders can do, and…
Cybersecurity Solutions
The Binance Incident: How One Admin Laptop Can Open the Door
Binance says its US$6.3B incident may have started with a compromised DevOps laptop, and later found additional points of breach, including abuse of…
Cybersecurity Solutions
WithSecure in 2026: A Year of Independent Recognition
From an AV-Comparatives Certified Leader result to a 100% Willingness to Recommend rating, here is what WithSecure achieved in 2026 and why it…
Threat Watch PH
How to Spot a GCash or Maya Phishing Text in 2026: A Field Guide for Filipinos
GCash and Maya say they never text links or ask for your OTP. How to spot a fake in 10 seconds, what to do in the first 10 minutes if you slipped,…
Threat Watch PH
PHP2Shell: Attackers Target Exposed Palo Alto Networks Firewall Management Pages
Palo Alto Networks reports active exploitation of the PHP2Shell flaws (CVE-2026-109618, CVE-2026-109619) against PAN-OS management interfaces exposed…
Threat Watch PH
Cybersecurity Awareness Month Wrap-Up: The Incidents That Hit Filipinos Hardest in 2026
Our Philippine Cyber Incident Map logged 32 incidents in 2026, nine of them confirmed. The five that hit ordinary Filipinos hardest, one lesson from…
Data Privacy & Compliance
Your Agency Holds More Than Résumés. Here’s How to Protect It This Month.
Applicant files are some of the most complete identity kits anyone holds on a Filipino worker. What the Data Privacy Act and the NPC expect, and five…
Threat Watch PH
Callback Phishing: The Scam Email That Has No Links, Only a Phone Number
A “Workstation Security Alert” with no links, just a US toll-free number. How callback phishing (TOAD) works, how big it has become, a red-flag…
Schools & Education
Automating School Admin Without Leaking Student Data: What DepEd and the DPA Require
Grades and school records are sensitive data under the Data Privacy Act. Which enrolment, grading, LMS, RFID, payment, CCTV and AI workflows are safe…
Threat Watch PH
We Built a Cyber Incident Map for Our Sales Team. Now It’s Public.
ARA Industries’ Philippine Cyber Incident Map is now public: sourced, status-labelled incidents pinned to verified HQs, updated as new cases are…
Threat Watch PH
This almost got us: the phishing tricks behind 2025–2026’s biggest crypto heists
The biggest crypto heists of 2025–2026 didn’t crack cold wallets. They fooled people. Here’s how, who’s behind them, the scams hitting Filipinos now,…
Ransomware & Incident Response
Ransomware and Philippine SMEs: why size won’t save you
WithSecure research shows small organisations now make up most ransomware leak-site victims, and attackers pick targets by opportunity, not size.…
Threat Watch PH
The Peso Pipe
An unlicensed casino sat in the Weather category of the App Store. It paid ₱20 to prove it was real, then billed ₱6,400 to release ₱20,000. The ads…
WithSecure Elements
Clinic downtime cost vs endpoint protection
Downtime — not headline ransoms — is what sinks clinics. Small, medium, and large practice risk math vs WithSecure Elements setup ranges.
Cybersecurity Solutions
Recommendations Before Licenses: How a Fixed-Scope Cyber Health Check Should Work
Too many “security conversations” with small Philippine teams start with a license quote. That order is backwards. If you do not yet know which…
Threat Watch PH
Fake “beneficiary enrolled” emails targeting GoTyme users
Phishing teams are using bank branding to push panic clicks. One recent sample uses Maya styling to claim a GoTyme Bank beneficiary was enrolled —…
Web & Mobile Apps
What “Scoping a Web or App Build” Should Look Like for a Busy PH Owner
Most Philippine owners do not fail a web project because they “lack vision.” They fail it in the quiet middle: unclear scope, plugin debt nobody…
Cybersecurity Solutions
20–40 PCs Is Enough to Hurt: A Practical Cyber Hygiene Starting Point for PH SMEs
If you run a Philippine clinic, law or accounting firm, creative agency, logistics office, or lean school with roughly 20–40 people on endpoints, you…
Schools & Education
Why Philippine Schools Need More Than Antivirus: Campus Cybersecurity for Lean IT Teams
Philippine campuses run on trust: parents trust the school with enrollment records, faculty trust shared drives and email for grades and assessments,…
Threat Watch PH
New Crypto Scam Alert
Fake “Unauthorized Access” Wallet Notifications Targeting Users Recently, I encountered something interesting — and potentially dangerous — that…
Web & Mobile Apps
The Evolution of Web Development Infrastructure: Why Scalability Matters for Modern Enterprises
Key Takeaways The landscape of web development has transformed dramatically over the past two decades. What once required dedicated server rooms and…
Web & Mobile Apps
Why Business Owners Are Moving to Cloud eCommerce Platforms: Cloud vs. Self-Hosted Solutions
Executive Summary The eCommerce landscape is experiencing a significant shift as business owners increasingly migrate from self-hosted platforms like…
WithSecure Elements
🛡️ Top 5 Questions for Endpoint Security
1. What is an Endpoint, and why is it the new target for attacks? An endpoint is any device that connects to your organization’s network, such as…
Cybersecurity Solutions
5 Top Questions About Web Application Firewalls (WAF)
We’ve broken down the most common questions about WAFs to help you understand this essential security tool. 1. What is the fundamental difference…
Threat Watch PH
The Corporate Blindspot: Why Social Engineering Succeeds in Professional Environments
In today’s corporate landscape, social engineering attacks have evolved beyond simple email scams. This comprehensive analysis examines why…
Threat Watch PH
Threat Actors Targeting Mobile Devices: Common Attacks and How to Stay Protected
In an age where mobile devices have become indispensable, they’ve also transformed into irresistible targets for cybercriminals. Threat actors are…
AI & Workflow Automation
AI’s Pivotal Role in Cybersecurity: Key Advances in 2024 and Projections for 2025
Artificial Intelligence (AI) continues to redefine the cybersecurity landscape. The year 2024 saw transformative advancements in how AI is applied to…
Threat Watch PH
The Global IT Shutdown of 2024: A Historical Cyber Incident
On 19 July 2024, a faulty CrowdStrike Falcon content update crashed about 8.5 million Windows devices worldwide. It was not a cyberattack. What…
Data Privacy & Compliance
Understanding NIS2: The Next Evolution in Cybersecurity Regulations
What is NIS2? The NIS2 Directive is the successor to the original Network and Information Security Directive (NIS Directive), which was introduced by…
Cybersecurity Solutions
How can companies ensure their technology tools are secure?
Ensuring the security of technology tools is critical for safeguarding sensitive data, maintaining business continuity, and protecting against cyber…
Threat Watch PH
What is Phishing?
Phishing is a cyberattack method in which malicious actors impersonate legitimate entities or individuals to deceive targets into revealing sensitive…
Ransomware & Incident Response
Ransomware Newcomers from WithSecure’s Threat Highlight Report
WithSecure shared these Ransomware newcomers from their September 2023 report: 3AM A new ransomware variant and group called 3AM has struck victims…
Threat Watch PH
Meet the Ducks – a Vietnamese threat group targeting Meta Business Accounts
In today’s interconnected world, social media has become the largest hub where individuals and businesses converge, with approximately 4.9 billion…
Frequently asked questions
Who writes ARA Industries Insights?
Articles are written and reviewed by the ARA Industries team, with sources linked in each article.
How often are new articles published?
New articles are published several times a month, with Threat Watch PH updated when notable scams or incidents affect Philippine users and organisations.
Where can I see live Philippine cyber incidents?
On the public Philippine Cyber Incident Map at incidents.ara.ph, which lists sourced, status-labelled incidents.
See what is hitting the Philippines now
Sourced, status-labelled incidents on our public map.
Open the incident map