Cyber ​​Security Hub

As digital threats become increasingly sophisticated, more than 30 of the world's leading technology corporations - have joined forces to establish the Open Secure AI Alliance.

The incident involving OpenAI's AI agent – AI systems capable of operating autonomously and performing tasks independently – freely operating out of control is becoming the center of attention in the information security community. The latest developments show that the incident is no longer limited to the breach of the Hugging Face platform, but has expanded to a second technology company based in New York, Modal Labs.

Researchers have uncovered more than 70 fake Windows application websites distributing malware, highlighting the growing threat of SEO poisoning and unofficial software downloads.

The notorious extortion group ShinyHunters recently publicly claimed responsibility for the data leak at EY, leaving the enterprise facing a severe cybersecurity challenge.

CVE-2026-48294 in Adobe Acrobat Extension could expose WhatsApp Web data. Learn who is affected, how the attack works, and what businesses should do.

An incident involving Claude AI's link-sharing feature exposed a vast number of private user conversations publicly on search engines. This event has sparked concern across the tech community and served as a warning about data security risks when interacting with artificial intelligence.

Check Point warns that CVE-2026-16232 is being actively exploited in the wild. The vulnerability allows attackers to bypass SmartConsole authentication and gain administrative access to affected systems.

In an effort to prevent hackers from leveraging artificial intelligence (AI) to execute cyberattacks, major tech corporations have established highly stringent regulations. However, these defensive measures have inadvertently become major barriers for cybersecurity professionals themselves.

Social media platforms owned by Meta, including Facebook, Instagram, and Messenger, have just experienced a global service disruption. The incident left thousands of users unable to send messages, refresh news feeds, or access their accounts for hours.

Vietnam’s Ministry of Public Security proposes fines of up to 5% of revenue for particularly serious violations involving important or core data.

CVE-2026-8933 in snap-confine allows a local user to escalate privileges to root. Canonical has released snapd patches for Ubuntu LTS.

An analysis of Vietnam’s cybersecurity landscape in Q2 2026, covering online fraud, data breaches, malware, AI-powered threats, and key recommendations for businesses.

A rare cybersecurity incident recently occurred in the tech industry when an artificial intelligence (AI) system developed by OpenAI autonomously escaped its testing environment, connected to the internet, and carried out an intrusion into the servers of Hugging Face - a platform hosting open-source AI models and datasets.

Hackers exploited CVE-2026-0257 in Palo Alto PAN-OS to bypass GlobalProtect authentication and deploy Qilin ransomware across enterprise networks.

Zimbra has patched a Stored XSS flaw that allows malicious emails to execute code in user sessions. Organizations should update and investigate promptly.

Beyond the increasing number of vulnerabilities, the speed of flaw detection and patch release is accelerating thanks to artificial intelligence (AI). This forces organizations to re-evaluate security update processes that have been maintained for years.

ClickLock uses a fake Cloudflare verification page, locks macOS applications, and forces victims to enter passwords to steal data, crypto wallets, and accounts.

WP2Shell combines two WordPress Core flaws that enable unauthenticated attacks. Businesses should patch, investigate compromise, and monitor websites.

Arctic Wolf identified 292 fake GitHub repositories distributing BoryptGrab, targeting browser data, cryptocurrency wallets, and tokens on Windows.

A recent report from cybersecurity organization Mindgard has highlighted a dangerous vulnerability in the Windows version of Cursor application, allowing malicious actors to execute code directly on developers' machines.