SOC operating 24/7 · Bangkok, UTC+7 zcr.ai — our platform ↗
Resources

What we publish

Most of what this company has written down is threat commentary, and all of it is in Thai. It was written for security teams working in Thailand and it stays in Thai. This page says what is in that archive, and points at the English and machine-readable material that does exist.

The archive

53 posts in Thai, 2023–2025

These moved across from the previous cyberdefense.co.th site with their dates and their URLs intact. They are working notes on things that happened: a ransomware family that came back, a vendor update that took production down, a CVE worth patching that week. Read them the way you would read an operations log — dated, specific, and correct as of the day they were written.

Roughly what it covers

What it keeps coming back to

01
Ransomware and malware families

LockBit 3.0, Qakbot, Yurei, Albiriox and others — what changed in a build, who it went after, and what a defender does about it.

02
Phishing and social engineering

Campaigns aimed at Thai inboxes: Microsoft Office lures, HTML smuggling, holiday-season pretexts and fake-identity fraud.

03
CVEs and vendor advisories

Named vulnerabilities and the reason a given one matters more than the rest of that month’s list.

04
Vendor outages and product comparisons

The CrowdStrike outage, CrowdStrike against SentinelOne, Proofpoint, Bitdefender — written from an operator’s side of the console.

05
SOC, SIEM and log retention

How detection work actually runs, where a SOC goes blind, and what Thai log-retention obligations mean in practice.

06
Endpoint, cloud and network engineering

SASE, DNS, Wi-Fi 6, data centre and on-premise-versus-cloud pieces, plus the odd note on open-source tooling.

Most recent

The last 6, newest first

Titles are in Thai. The links go straight to the article.

All posts →
  1. ‘มีเฮ’ Google มีฟีเจอร์ใหม่ให้ “เปลี่ยนอีเมลได้”!!
  2. การโจมตีไซเบอร์ในปี 2026 ซับซ้อนและเร็วขึ้น บทความนี้สรุป 3 วิธีปกป้องธุรกิจ: กันยึดบัญชี ลดช่องโหว่ด้วยแพตช์…
  3. ปิดจุดบอดของ SOC: มองเห็นภัยคุกคามที่เจาะ “อุตสาหกรรมของคุณ” และ “ประเทศของคุณ” แบบเรียลไทม์
  4. บัตรปลอม อาชญากรรมไซเบอร์: ปมตั้งข้อหาเขย่าโลกดิจิทัล !!
  5. Google ปิด Dark Web Report ในปี 2026 ผู้ใช้ควรรู้อะไรและต้องเตรียมตัวอย่างไร
  6. ช่วงเทศกาล…โอกาสทองของแฮกเกอร์: อ่านเกมฟิชชิ่ง Storm-0900 ที่ใช้ “ใบสั่งจอดรถ” และ “ผลตรวจแพทย์” ล่อเหยื่อ
Why there is no English version

We are not going to machine-translate 53 technical posts

A machine translation of a security post gets the nouns right and the meaning wrong, and it would put 53 low-quality English pages on this domain competing with the Thai originals that people actually read and link to.

If you need one of them in English, open it in whatever translator you already trust, or send us the link and ask. A person will answer.

Not here

Things people look for on a page like this and will not find

Report templates

Delivery goes out in your template with your logo on it, so a generic sample would not tell you anything about what you would be sending your customer. Ask and we will walk you through what a report contains.

Customer case studies

We never meet the end client and we do not name the partners who resell us. There is nothing to publish that would not break that.

A partner portal

There is not one yet. Onboarding, scoping and escalation run through email, LINE and the phone number below.

An ISO 27001 or SOC 2 certificate

Cyber Defense does not hold either one. What it does hold is Thai standard มศอ. 4003.1-2560 from NECTEC, for computer traffic data retention under the Computer Crime Act. If your procurement process requires an ISMS certificate from every subcontractor, that is a real blocker and you should raise it in the first conversation rather than at contract stage. Ask and we will answer your security questionnaire against the controls that are actually in place.

Ask

Three ways to reach an engineer

Email
hello@cyberdefense.co.th
LINE
@cyberdefense
Phone
+66 86-940-1383

Pick one customer. We will run it for 60 days.

Choose a customer you already serve. We deliver Managed Exposure on their domain for two months, in your template, at no cost — so you can see exactly what your customer would receive before you sign anything.

Apply as a partner