Cyber ​​Security Hub

This technique is known as indirect prompt injection. Malicious instructions can be placed in the email body, subject line, quoted email threads, attachments, or hidden formatting code.

A recent security incident involving Claude has sent shockwaves through the tech community, as a vast amount of private user data was unexpectedly indexed and exposed publicly by Google Search.

Broadcom has officially released VMware Security Advisory (VMSA-2026-0006) to urgently address 5 vulnerabilities across several of its software product lines. Notably, up to 3 vulnerabilities are rated as "Critical".

Microsoft confirmed that Defender for Endpoint on Linux may become disabled after an update and reboot. Organizations should verify affected systems and upgrade immediately.

As digital threats become increasingly sophisticated, more than 30 of the world's leading technology corporations - have joined forces to establish the Open Secure AI Alliance.

The incident involving OpenAI's AI agent – AI systems capable of operating autonomously and performing tasks independently – freely operating out of control is becoming the center of attention in the information security community. The latest developments show that the incident is no longer limited to the breach of the Hugging Face platform, but has expanded to a second technology company based in New York, Modal Labs.

Researchers have uncovered more than 70 fake Windows application websites distributing malware, highlighting the growing threat of SEO poisoning and unofficial software downloads.

The notorious extortion group ShinyHunters recently publicly claimed responsibility for the data leak at EY, leaving the enterprise facing a severe cybersecurity challenge.

CVE-2026-48294 in Adobe Acrobat Extension could expose WhatsApp Web data. Learn who is affected, how the attack works, and what businesses should do.

An incident involving Claude AI's link-sharing feature exposed a vast number of private user conversations publicly on search engines. This event has sparked concern across the tech community and served as a warning about data security risks when interacting with artificial intelligence.

Check Point warns that CVE-2026-16232 is being actively exploited in the wild. The vulnerability allows attackers to bypass SmartConsole authentication and gain administrative access to affected systems.

In an effort to prevent hackers from leveraging artificial intelligence (AI) to execute cyberattacks, major tech corporations have established highly stringent regulations. However, these defensive measures have inadvertently become major barriers for cybersecurity professionals themselves.

Social media platforms owned by Meta, including Facebook, Instagram, and Messenger, have just experienced a global service disruption. The incident left thousands of users unable to send messages, refresh news feeds, or access their accounts for hours.

Vietnam’s Ministry of Public Security proposes fines of up to 5% of revenue for particularly serious violations involving important or core data.

CVE-2026-8933 in snap-confine allows a local user to escalate privileges to root. Canonical has released snapd patches for Ubuntu LTS.

An analysis of Vietnam’s cybersecurity landscape in Q2 2026, covering online fraud, data breaches, malware, AI-powered threats, and key recommendations for businesses.

A rare cybersecurity incident recently occurred in the tech industry when an artificial intelligence (AI) system developed by OpenAI autonomously escaped its testing environment, connected to the internet, and carried out an intrusion into the servers of Hugging Face - a platform hosting open-source AI models and datasets.

Hackers exploited CVE-2026-0257 in Palo Alto PAN-OS to bypass GlobalProtect authentication and deploy Qilin ransomware across enterprise networks.

Zimbra has patched a Stored XSS flaw that allows malicious emails to execute code in user sessions. Organizations should update and investigate promptly.

Beyond the increasing number of vulnerabilities, the speed of flaw detection and patch release is accelerating thanks to artificial intelligence (AI). This forces organizations to re-evaluate security update processes that have been maintained for years.