top of page
Cyber Security Hub
Stay updated with the latest news on technology, cybersecurity, market reports
Featured News
Cybersecurity News Roundup (20.7 - 26.7): AI-powered attacks, data breaches and critical vulnerabilities
Stay updated with the latest cybersecurity news from Vietnam and around the world, including AI-powered attacks, data breaches, critical vulnerabilities, and emerging cyber threats affecting businesses.
Jul 27
Cybersecurity landscape in Vietnam – Q2/2026: Key risks and recommendations for businesses
An analysis of Vietnam’s cybersecurity landscape in Q2 2026, covering online fraud, data breaches, malware, AI-powered threats, and key recommendations for businesses.
Jul 23
Last week in cybersecurity (June 22–28): EVN scams alert, AI manipulation, and Linux root-exploiting vulnerability
Explore last week in cybersecurity (June 22–28): EVN warns of fake OTPs, AI agents tricked into executing malware, and the DirtyClone Root flaw. Read now!
Jun 29
Optimizing IT risk management with in-depth Information Security GRC solutions
Information security GRC is increasingly becoming a critical part of IT governance strategy, helping align governance, risk, and compliance requirements into a unified model.
Aug 25
Network maintenance for Startups: In-house or Outsourced?
Learn what a startup network maintenance solution should include, how to choose the right support model, and what to look for in a service provider.
Jul 25
Financial sector cybersecurity 2026: Decoding 6 cyberattack trends and proactive defense strategies
Decode 6 financial sector cybersecurity trends in 2026 from Darktrace & Visa. Discover how to combat ransomware and phishing with a 24/7 SOC platform from IPSIP experts!
Jul 7
How is personal data being exposed in the digital environment?
From names and phone numbers to location and biometrics, personal data can be exposed online. What controls should businesses put in place?
4 days ago
Online scams during Vietnam National Day 2026: Deepfakes and malicious QR codes increase digital transaction risks
Vietnam warns of National Day 2026 scams involving deepfakes, malicious QR codes, fake tickets and bookings, with businesses urged to strengthen verification controls.
6 days ago
Ransomware could disrupt systems serving millions of users for days
A warning on August 24, 2026 highlights how ransomware can disrupt services for days without continuous monitoring, isolated backups, and tested recovery plans.
7 days ago
24H movement
Massive data leak: Over 153 million driver's licenses offered for sale on the Dark Web
Hundreds of millions of personal identity records have recently surfaced on Dark Web, raising severe cybersecurity concerns for online identity verification systems.
3 days ago
Critical vulnerability in Cisco Nexus 9000: Risk of remote system takeover
Cisco has issued an urgent advisory regarding an exceptionally critical security vulnerability affecting its Nexus 9000 series switches. Carrying a near-perfect Common Vulnerability Scoring System (CVSS) score of 9.8/10, this flaw could allow remote attackers to easily breach and gain full control of the device without requiring any account authentication.
3 days ago
Manchester Airports Group data breach affects around 8.7 million customers
Manchester Airports Group suffered a cyber incident affecting around 8.7 million customers. Here are the phishing risks and actions businesses should prioritize
3 days ago
All posts
Alert: Hackers hijack Claude AI accounts using session-stealing infostealer malware
Anthropic’s Claude AI platform has become a prime target for cybercriminals.
4 days ago
How is personal data being exposed in the digital environment?
From names and phone numbers to location and biometrics, personal data can be exposed online. What controls should businesses put in place?
4 days ago
Online scams during Vietnam National Day 2026: Deepfakes and malicious QR codes increase digital transaction risks
Vietnam warns of National Day 2026 scams involving deepfakes, malicious QR codes, fake tickets and bookings, with businesses urged to strengthen verification controls.
6 days ago
SilkParasite cyber espionage campaign targets central Asian government agencies
SilkParasite targets Central Asian government agencies using spear-phishing, DLL sideloading, seven RAT families and Google Drive-based command-and-control.
Aug 27
Decree 333/2026/ND-CP takes effect: what businesses need to know about cybersecurity compliance
Decree 333/2026/ND-CP took effect on August 19, 2026, introducing requirements on account verification, information disclosure, content handling and system log retention.
Aug 25
Over 92,000 malware detections impersonated ChatGPT and other AI services in early 2026
Kaspersky recorded over 92,000 malware and PUA detections disguised as ChatGPT, Claude and Gemini in early 2026, highlighting growing AI impersonation risks.
Aug 25
Alarm: AI behind nearly half of cyberattacks in Vietnam
In the first half of 2026, Vietnam's information security landscape recorded a concerning shift as artificial intelligence (AI) began directly participating in intrusion and data theft activities.
Aug 24
Fortinet acquires Virtue AI to Expand Security from Networks to AI Agents
Fortinet acquires Virtue AI to extend continuous AI protection with red teaming, runtime guardrails and AI Agent governance for enterprise environments.
Aug 20
Jewelbug's multi-target attack campaign: When professional hackers scam crypto using AI
We often classify hackers into two distinct groups: cyber spies targeting state secrets on one side, and cybercriminals seeking financial gain on the other. However, a threat actor group known as Jewelbug (believed to be based in China) represents a unique exception.
Aug 19
Time for a change: When Active Directory is no longer enough to protect your enterprise
Although many organizations have moved most of their applications, devices, and operational workflows to the cloud, their identity management systems remain "bound" to on-premises Active Directory.
Aug 19
DDoS attacks surge, 935 incidents exceed 1 Tbps in the first half of 2026
Cloudflare recorded 935 DDoS attacks exceeding 1 Tbps in H1 2026, with Q2 up 519%. Enterprises should prioritize automated mitigation, DNS protection, and continuous monitoring
Aug 17
Critical Zoom vulnerability: risk of computer takeover via a familiar feature
A critical chain of security vulnerabilities has recently been discovered in Zoom, allowing anyone in a meeting – whether a presenter or an attendee – to take control of other participants' computers.
Aug 12
Risk of enterprise data leakage from "one-click" vulnerability on Atlassian Rovo AI
The discovery of RovoBlast - a severe security vulnerability in the Atlassian Rovo AI assistant serves as proof that an enterprise's internal data can be exfiltrated through a single malicious link.
Aug 11
Vulnerability in Cursor, VS Code, and Antigravity could steal API keys
A flaw in Cursor, VS Code, and Antigravity could execute commands after one click, putting API keys, source code, and developer devices at risk.
Aug 7
Meta AI model accidentally infiltrates external system due to testing configuration error
During a recent information security assessment, an artificial intelligence (AI) model from Meta unexpectedly gained access to the internet and infiltrated the computer system of a third-party service.
Aug 6
Arch Linux disables AUR package adoption following malware campaign
Arch Linux has temporarily disabled AUR package adoption after attackers abused orphaned packages to distribute malware. Here's what happened and why it matters.
Aug 4
Breakthrough AI application: Google discovers 13-year-old Chrome vulnerability and sets new patching record
Google recently confirmed that its AI implementation has achieved record-breaking patch delivery speeds, even discovering a critical vulnerability that had remained hidden for 13 years within the Chrome codebase.
Aug 3
Chaos ransomware through Microsoft Teams encrypted a network in just 17 hours
STAC4749 impersonated IT support staff through Microsoft Teams to gain remote access and deploy Chaos ransomware in less than 17 hours. Here's what organizations need to know.
Aug 3
Prompt Injection: Hackers hide malicious instructions to manipulate enterprise AI
This technique is known as indirect prompt injection. Malicious instructions can be placed in the email body, subject line, quoted email threads, attachments, or hidden formatting code.
Jul 31
What is cybersecurity? A comprehensive security guide for digital enterprises
What is cybersecurity for business? Explore modern cyber risks, B2B security strategies, anti-hacker solutions, and the steps required to build an effective business defense system.
Jul 30
bottom of page