Cyber ​​Security Hub

Two familiar yet crucial defensive tools that every organization must thoroughly understand are IDS (Intrusion Detection System) and IPS (Intrusion Prevention System).

A flaw in Cursor, VS Code, and Antigravity could execute commands after one click, putting API keys, source code, and developer devices at risk.

During a recent information security assessment, an artificial intelligence (AI) model from Meta unexpectedly gained access to the internet and infiltrated the computer system of a third-party service.

Information security researchers have recently discovered a dangerous cyberattack campaign named SMOKE#SCREEN. By spreading fake software update notifications from familiar applications like Zoom or Adobe, attackers can silently install remote control tools and gain full control over victims' computers.

Cybersecurity experts have recently uncovered a new attack technique called "Pass-ta-key," which enables malware to compromise and hijack accounts even when secured by Passkeys.

In the era of digital transformation, maintaining a safe and reliable cyberspace has become a key factor for overall development. The Vietnam Cybersecurity Day event held annually on August 6 is an important occasion to promote public awareness and responsibility regarding information security protection.

Unit 42 disclosed three techniques that could let malware hijack passkey-protected accounts on Chrome for Windows after a device is compromised.

The npm open-source ecosystem has just experienced a major shock. On August 4, 2026, a malware campaign named Shai-Hulud re-emerged as a worm (a type of malware capable of self-replicating and spreading automatically). The attack directly targeted the software supply chain, hijacking critical developer accounts and rapidly poisoning a wide array of popular programming libraries.

A critical security vulnerability has recently left many Coldcard wallet users completely drained of their assets, with total losses surpassing $130 million in cryptocurrency.

SonicWall SMA1000 flaws CVE-2026-15409 and CVE-2026-15410 are being exploited to gain root access, increasing ransomware and data breach risks.

Capitalizing on victims' anxiety and their desperate desire to recover lost assets, cybercriminals turn them into prime targets in a new fraud chain known as a Recovery Scam.

Arch Linux has temporarily disabled AUR package adoption after attackers abused orphaned packages to distribute malware. Here's what happened and why it matters.

Google recently confirmed that its AI implementation has achieved record-breaking patch delivery speeds, even discovering a critical vulnerability that had remained hidden for 13 years within the Chrome codebase.

STAC4749 impersonated IT support staff through Microsoft Teams to gain remote access and deploy Chaos ransomware in less than 17 hours. Here's what organizations need to know.

CosmosEscape – a critical security vulnerability in Microsoft's Azure Cosmos DB database service allows attackers to bypass authorization barriers, conduct cross-tenant interactions between user accounts, and threaten data security on a global scale.

A dangerous cyber attack campaign targeting Microsoft Outlook Web Access (OWA) systems has recently been discovered, directly threatening government agencies in the US and Europe.

This technique is known as indirect prompt injection. Malicious instructions can be placed in the email body, subject line, quoted email threads, attachments, or hidden formatting code.

A recent security incident involving Claude has sent shockwaves through the tech community, as a vast amount of private user data was unexpectedly indexed and exposed publicly by Google Search.

Broadcom has officially released VMware Security Advisory (VMSA-2026-0006) to urgently address 5 vulnerabilities across several of its software product lines. Notably, up to 3 vulnerabilities are rated as "Critical".

Microsoft confirmed that Defender for Endpoint on Linux may become disabled after an update and reboot. Organizations should verify affected systems and upgrade immediately.