Cyber ​​Security Hub

As core technology platforms reveal their weaknesses, the consequences have become clearly apparent through a wave of Japanese businesses compensating customers, posing a life-or-death information security challenge for every organization in the digital era.

Wedding invitation messages from an acquaintance's account can still be a scam. Cybercriminals exploit digital wedding invitations to direct recipients to fake login pages or lure them into installing malicious applications, thereby stealing information and appropriating assets.

Millions of servers worldwide are entering a tense race against time. The security team of the PHP project – the engine powering the majority of websites today – has just announced the emergency rollout of fixes to resolve two exceptionally severe security vulnerabilities.

Recently, the international maritime community received a red alert from cybersecurity experts regarding the risk of digital asset leaks. Dozens of organizations across the industry, large and small, are falling victim to a large-scale extortion campaign. The hacker group is threatening to release troves of sensitive data if these companies refuse to pay massive ransoms.

Recently, an incident involving the remote disabling of freezers across a series of supermarkets in France sent shockwaves through the retail sector. Even more alarming, following this attack on Danfoss systems, cybersecurity organizations conducted wide-scale scans and discovered that thousands of similar temperature control devices remain publicly exposed on the Internet without protective filtering.

The South Korean financial sector faced a massive cybersecurity shock in early October 2026. This time, cybercriminals did not rely on traditional manual methods, but weaponized Artificial Intelligence (AI) to breach systems, leading to the leak of personal data belonging to over 67,000 users. The incident forced national authorities to intervene immediately to prevent a wider crisis.

In the era of hyper-connectivity, "digital sovereignty" has moved beyond academic discussions to become a vital factor for every enterprise. The recent launch of the Sovereign Identity Access solution from cybersecurity vendor WALLIX offers a practical perspective: To truly master their digital space, enterprises must start with strict control over identity and access systems.

Recently, the cybersecurity situation in Hung Yen has faced complex developments as information systems of several local agencies and organizations showed signs of being compromised. The culprits behind these attacks have been identified as two dangerous ransomware strains named "The Gentlemen" and "Trigona." In response to the situation, the Hung Yen Provincial Police quickly issued an urgent warning to help units take timely preventive measures.

Apple has released new operating system updates to address a severe information security incident. This marks the seventh zero-day vulnerability that the tech giant has had to address since the beginning of the year, following signs of exploitation in attack campaigns targeting highly selected individuals.

Recently, tech company Google confirmed a rare incident: its artificial intelligence (AI) model Gemini autonomously breached the systems of three different companies.

Recently, renowned cybersecurity firm Check Point urgently released patches for two extremely critical security vulnerabilities residing in its firewall products and network management systems.

Vietnam is entering an acceleration phase in its national digital transformation process, with the core objective of successfully building a Digital Government. In this new era, Artificial Intelligence (AI) is emerging as a groundbreaking solution, not only supporting smart network management but also establishing a robust proactive defense mechanism.

In under 10 hours, hacker-controlled AI Agent automatically infiltrated and gained ultimate administrative privileges over an enterprise – condensing a workload that normally takes humans up to two weeks into merely a single work shift, according to the latest observations from Unit 42 (Palo Alto Networks).

Cisco has issued an urgent advisory regarding an exceptionally critical security vulnerability affecting its Nexus 9000 series switches. Carrying a near-perfect Common Vulnerability Scoring System (CVSS) score of 9.8/10, this flaw could allow remote attackers to easily breach and gain full control of the device without requiring any account authentication.

Directly targeting Microsoft 365 services, the sophisticated phishing kit Mirage2FA does not stop at stealing passwords – it also hijacks login session "keys." As a result, hackers can open the doors wide to corporate systems without worrying about the two-factor authentication (2FA) layer.

Recently, information security experts have discovered a sophisticated phishing campaign masquerading as security scanning websites impersonating Microsoft.

Cybersecurity analysts have recently discovered a large-scale malware distribution campaign targeting the gaming community directly.

By tampering with the login process, attackers gained access to the mailbox and redirected vendor payments. Notably, this campaign used no malware, infostealers, or remote access tools on the victim's device.

The CareCloud data breach – involving a U.S.-listed healthcare technology solutions provider – is turning into one of the largest healthcare data breaches of 2026.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency alert regarding a critical security vulnerability in the Windows operating system.