Cyber ​​Security Hub

Since April 2026, a sophisticated phishing campaign has been targeting hotels across Asia and Europe. The attackers abuse trusted services including Calendly and Google to distribute a ZIP archive containing the TonRAT malware, which is executed through the legitimate Node.js v24.13.0 runtime

Vietnam Electricity (EVN) has just issued an urgent warning regarding a newly emerged tech-based scam method. Malicious actors are exploiting the identity of the power sector to send fraudulent messages aimed at misappropriating citizens' data and assets.

Curl 8.21.0 addresses a record-breaking 18 security vulnerabilities (CVEs), the highest number ever fixed in a single Curl release. Among them is CVE-2026-8932, a flaw that originated in 2001 and remained undiscovered for more than 25 years before finally being patched.

Researchers at Zscaler ThreatLabz have discovered an Edgecution malware campaign that spreads through Microsoft Teams and a malicious Microsoft Edge browser extension. The malware uses a two-component architecture and abuses Chrome Native Messaging to escape the browser sandbox, allowing attackers to execute commands, run PowerShell scripts, and gain direct access to victims' systems.

Completing a Penetration Testing project is just the beginning of an organization's journey to protect its digital assets. The real challenge lies in the post-testing phase, where organizations face a long list of complex technical findings.

In June 2026, security researchers identified a verification flaw on ClawHub that enabled 15 unauthorized accounts to publish 23 deceptive plugins using official OpenClaw namespaces.

In the tech world, Apple is renowned for its stringent security ecosystem. However, a recent discovery by cybersecurity experts has revealed a critical vulnerability embedded directly within the hardware of legacy iPhone models.

A sophisticated and nearly invisible cyberattack method, involving a technology called Traffic Distribution System (TDS), is being utilized by cybercriminals to trap Internet users into the scam websites. In response to this situation, the US Federal Bureau of Investigation (FBI) has issued an urgent advisory to help the community identify and prevent the risk.

Looking for Pentest in HCM? Discover how penetration testing helps businesses uncover hidden vulnerabilities, meet compliance requirements, and strengthen cyber resilience.

Discover comprehensive information technology for small business. Avoid penalties of up to 5% of revenue from the Personal Data Protection Law with FlexSecure360 from IPSIP today!

Discover the top 6 industrial cybersecurity solutions to protect OT, ICS, and SCADA environments from ransomware and operational disruptions. Learn how to strengthen cyber resilience today.

Discover the cybersecurity aspects of Windows 11 26H2. Learn how the eKB update helps enterprises minimize risks and manage the security lifecycle.

Artificial Intelligence (AI) is being weaponized by malicious actors to orchestrate increasingly sophisticated technological traps.

Installing pirated software or using cracking tools (crack) remains a "hard-to-break habit" for many users, organizations, and businesses in Vietnam. Many people mistakenly believe this is a wise way to save costs, but in reality, they are handing over all their critical data to hackers with their own hands.

Using cracked software has long been warned about due to potential cybersecurity vulnerabilities. However, from a legal perspective, unauthorized installation of pirated operating systems or office applications for profit can lead to heavy penalties, including criminal liability.