Cyber ​​Security Hub

Shortly after proof-of-concept (PoC) tools were widely shared online, hacker groups quickly leveraged them to launch real-world attacks against Microsoft SharePoint servers.

Security flaws affecting Claude Code, Gemini CLI and Codex show how AI coding agents can expose CI/CD pipelines, source code, credentials and enterprise systems.

According to the annual Blue Report 2026 recently published by Picus Labs, the cybersecurity defense capabilities of enterprises are showing signs of recovery, but the truth behind these positive numbers hides many concerning vulnerabilities.

Beginning with a vulnerability in an auxiliary tool, the supply chain attack targeting LiteLLM rapidly expanded, threatening numerous technology systems worldwide.

About enterprise network security. Can 1–2 internal IT staff adequately protect enterprise network security? Explore common security gaps, attack risks, and practical cybersecurity options.

CVE-2026-10090 in Red Hat ACM scores 9.9 CVSS and may allow users with edit permissions to escalate to cluster-admin. Enterprises should review RBAC.

A critical chain of security vulnerabilities has recently been discovered in Zoom, allowing anyone in a meeting – whether a presenter or an attendee – to take control of other participants' computers.

Cybersecurity experts have recently detected a sharp surge in scanning activity targeting VMware vCenter systems. This serves as an early warning signal that threat actors are actively hunting for unpatched targets in preparation for dangerous intrusion attempts.

WordPress patched CVE-2026-64638, a pre-auth reflected XSS flaw that could lead to PHP code execution when an administrator interacts with attacker-controlled content.

The discovery of RovoBlast - a severe security vulnerability in the Atlassian Rovo AI assistant serves as proof that an enterprise's internal data can be exfiltrated through a single malicious link.

Levi Strauss & Co. said it identified a cybersecurity incident in which an unauthorized third party used social engineering to gain access to three company-issued employee computers. From those devices, certain corporate information was accessed and exfiltrated.

Metabase has confirmed a critical cybersecurity incident involving an actively exploited zero-day vulnerability.

Learn how combining IT outsourcing and cybersecurity with an outsourced SOC helps enterprises define responsibilities and improve IT–SOC collaboration.

OpenAI restricted some Astra activities after preliminary evaluations could not rule out Critical cybersecurity capabilities, including zero-day exploitation.

Two familiar yet crucial defensive tools that every organization must thoroughly understand are IDS (Intrusion Detection System) and IPS (Intrusion Prevention System).

A flaw in Cursor, VS Code, and Antigravity could execute commands after one click, putting API keys, source code, and developer devices at risk.

During a recent information security assessment, an artificial intelligence (AI) model from Meta unexpectedly gained access to the internet and infiltrated the computer system of a third-party service.

Information security researchers have recently discovered a dangerous cyberattack campaign named SMOKE#SCREEN. By spreading fake software update notifications from familiar applications like Zoom or Adobe, attackers can silently install remote control tools and gain full control over victims' computers.

In the era of digital transformation, maintaining a safe and reliable cyberspace has become a key factor for overall development. The Vietnam Cybersecurity Day event held annually on August 6 is an important occasion to promote public awareness and responsibility regarding information security protection.

Unit 42 disclosed three techniques that could let malware hijack passkey-protected accounts on Chrome for Windows after a device is compromised.