Cyber ​​Security Hub

Recently, renowned cybersecurity firm Check Point urgently released patches for two extremely critical security vulnerabilities residing in its firewall products and network management systems.

Vietnam is entering an acceleration phase in its national digital transformation process, with the core objective of successfully building a Digital Government. In this new era, Artificial Intelligence (AI) is emerging as a groundbreaking solution, not only supporting smart network management but also establishing a robust proactive defense mechanism.

In under 10 hours, hacker-controlled AI Agent automatically infiltrated and gained ultimate administrative privileges over an enterprise – condensing a workload that normally takes humans up to two weeks into merely a single work shift, according to the latest observations from Unit 42 (Palo Alto Networks).

Cisco has issued an urgent advisory regarding an exceptionally critical security vulnerability affecting its Nexus 9000 series switches. Carrying a near-perfect Common Vulnerability Scoring System (CVSS) score of 9.8/10, this flaw could allow remote attackers to easily breach and gain full control of the device without requiring any account authentication.

Directly targeting Microsoft 365 services, the sophisticated phishing kit Mirage2FA does not stop at stealing passwords – it also hijacks login session "keys." As a result, hackers can open the doors wide to corporate systems without worrying about the two-factor authentication (2FA) layer.

Recently, information security experts have discovered a sophisticated phishing campaign masquerading as security scanning websites impersonating Microsoft.

Cybersecurity analysts have recently discovered a large-scale malware distribution campaign targeting the gaming community directly.

By tampering with the login process, attackers gained access to the mailbox and redirected vendor payments. Notably, this campaign used no malware, infostealers, or remote access tools on the victim's device.

The CareCloud data breach – involving a U.S.-listed healthcare technology solutions provider – is turning into one of the largest healthcare data breaches of 2026.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency alert regarding a critical security vulnerability in the Windows operating system.

We often classify hackers into two distinct groups: cyber spies targeting state secrets on one side, and cybercriminals seeking financial gain on the other. However, a threat actor group known as Jewelbug (believed to be based in China) represents a unique exception.

Shortly after proof-of-concept (PoC) tools were widely shared online, hacker groups quickly leveraged them to launch real-world attacks against Microsoft SharePoint servers.

According to the annual Blue Report 2026 recently published by Picus Labs, the cybersecurity defense capabilities of enterprises are showing signs of recovery, but the truth behind these positive numbers hides many concerning vulnerabilities.

A critical chain of security vulnerabilities has recently been discovered in Zoom, allowing anyone in a meeting – whether a presenter or an attendee – to take control of other participants' computers.

During a recent information security assessment, an artificial intelligence (AI) model from Meta unexpectedly gained access to the internet and infiltrated the computer system of a third-party service.

Information security researchers have recently discovered a dangerous cyberattack campaign named SMOKE#SCREEN. By spreading fake software update notifications from familiar applications like Zoom or Adobe, attackers can silently install remote control tools and gain full control over victims' computers.

In the era of digital transformation, maintaining a safe and reliable cyberspace has become a key factor for overall development. The Vietnam Cybersecurity Day event held annually on August 6 is an important occasion to promote public awareness and responsibility regarding information security protection.

The npm open-source ecosystem has just experienced a major shock. On August 4, 2026, a malware campaign named Shai-Hulud re-emerged as a worm (a type of malware capable of self-replicating and spreading automatically). The attack directly targeted the software supply chain, hijacking critical developer accounts and rapidly poisoning a wide array of popular programming libraries.

CosmosEscape – a critical security vulnerability in Microsoft's Azure Cosmos DB database service allows attackers to bypass authorization barriers, conduct cross-tenant interactions between user accounts, and threaten data security on a global scale.

Broadcom has officially released VMware Security Advisory (VMSA-2026-0006) to urgently address 5 vulnerabilities across several of its software product lines. Notably, up to 3 vulnerabilities are rated as "Critical".