top of page
Cyber Security Hub
Stay updated with the latest news on technology, cybersecurity, market reports
Featured News
Cybersecurity News Roundup (20.7 - 26.7): AI-powered attacks, data breaches and critical vulnerabilities
Stay updated with the latest cybersecurity news from Vietnam and around the world, including AI-powered attacks, data breaches, critical vulnerabilities, and emerging cyber threats affecting businesses.
Jul 27
Cybersecurity landscape in Vietnam – Q2/2026: Key risks and recommendations for businesses
An analysis of Vietnam’s cybersecurity landscape in Q2 2026, covering online fraud, data breaches, malware, AI-powered threats, and key recommendations for businesses.
Jul 23
Last week in cybersecurity (June 22–28): EVN scams alert, AI manipulation, and Linux root-exploiting vulnerability
Explore last week in cybersecurity (June 22–28): EVN warns of fake OTPs, AI agents tricked into executing malware, and the DirtyClone Root flaw. Read now!
Jun 29
Optimizing IT risk management with in-depth Information Security GRC solutions
Information security GRC is increasingly becoming a critical part of IT governance strategy, helping align governance, risk, and compliance requirements into a unified model.
Aug 25
Network maintenance for Startups: In-house or Outsourced?
Learn what a startup network maintenance solution should include, how to choose the right support model, and what to look for in a service provider.
Jul 25
Financial sector cybersecurity 2026: Decoding 6 cyberattack trends and proactive defense strategies
Decode 6 financial sector cybersecurity trends in 2026 from Darktrace & Visa. Discover how to combat ransomware and phishing with a 24/7 SOC platform from IPSIP experts!
Jul 7
How is personal data being exposed in the digital environment?
From names and phone numbers to location and biometrics, personal data can be exposed online. What controls should businesses put in place?
3 days ago
Online scams during Vietnam National Day 2026: Deepfakes and malicious QR codes increase digital transaction risks
Vietnam warns of National Day 2026 scams involving deepfakes, malicious QR codes, fake tickets and bookings, with businesses urged to strengthen verification controls.
5 days ago
Ransomware could disrupt systems serving millions of users for days
A warning on August 24, 2026 highlights how ransomware can disrupt services for days without continuous monitoring, isolated backups, and tested recovery plans.
6 days ago
24H movement
Massive data leak: Over 153 million driver's licenses offered for sale on the Dark Web
Hundreds of millions of personal identity records have recently surfaced on Dark Web, raising severe cybersecurity concerns for online identity verification systems.
2 days ago
Critical vulnerability in Cisco Nexus 9000: Risk of remote system takeover
Cisco has issued an urgent advisory regarding an exceptionally critical security vulnerability affecting its Nexus 9000 series switches. Carrying a near-perfect Common Vulnerability Scoring System (CVSS) score of 9.8/10, this flaw could allow remote attackers to easily breach and gain full control of the device without requiring any account authentication.
2 days ago
Manchester Airports Group data breach affects around 8.7 million customers
Manchester Airports Group suffered a cyber incident affecting around 8.7 million customers. Here are the phishing risks and actions businesses should prioritize
2 days ago
All posts
Critical vulnerability in Cisco Nexus 9000: Risk of remote system takeover
Cisco has issued an urgent advisory regarding an exceptionally critical security vulnerability affecting its Nexus 9000 series switches. Carrying a near-perfect Common Vulnerability Scoring System (CVSS) score of 9.8/10, this flaw could allow remote attackers to easily breach and gain full control of the device without requiring any account authentication.
2 days ago
Security alert: Critical vulnerability chain in PaperCut exploited to gain server control
PaperCut NG and MF print management systems are facing dangerous cyberattacks as threat actors exploit a chain of two security vulnerabilities to achieve remote system compromise without authentication.
6 days ago
Critical Keycloak vulnerability enables remote account takeover: What you need to know
A newly discovered vulnerability in Keycloak allows remote attackers to take over any account on the system without requiring user interaction or valid credentials.
Aug 26
Critical GitLab vulnerability actively exploited: Severe risk to the supply chain
Just days after being publicly disclosed, a critical security vulnerability in the GitLab platform has rapidly been targeted by attackers.
Aug 25
Apple releases new security updates: Patching dozens of vulnerabilities across macOS, iOS, and iPadOS
Apple has officially rolled out new security updates for Mac, iPhone, and iPad devices. This release addresses dozens of system vulnerabilities, most of which are tied to WebKit - the company's web browser engine.
Aug 20
macOS vulnerability exploited for takeover and crypto mining
A new security vulnerability in the macOS Screen Sharing feature is being actively exploited by malicious actors to gain control of devices and install cryptocurrency mining software.
Aug 18
A vulnerability in LiteLLM drags 2,500 organizations into danger
Beginning with a vulnerability in an auxiliary tool, the supply chain attack targeting LiteLLM rapidly expanded, threatening numerous technology systems worldwide.
Aug 13
Red Hat ACM hit by critical CVE that could lead to cluster-admin access
CVE-2026-10090 in Red Hat ACM scores 9.9 CVSS and may allow users with edit permissions to escalate to cluster-admin. Enterprises should review RBAC.
Aug 13
Critical Zoom vulnerability: risk of computer takeover via a familiar feature
A critical chain of security vulnerabilities has recently been discovered in Zoom, allowing anyone in a meeting – whether a presenter or an attendee – to take control of other participants' computers.
Aug 12
Wave of scans target critical VMware vCenter vulnerabilities
Cybersecurity experts have recently detected a sharp surge in scanning activity targeting VMware vCenter systems. This serves as an early warning signal that threat actors are actively hunting for unpatched targets in preparation for dangerous intrusion attempts.
Aug 12
Risk of enterprise data leakage from "one-click" vulnerability on Atlassian Rovo AI
The discovery of RovoBlast - a severe security vulnerability in the Atlassian Rovo AI assistant serves as proof that an enterprise's internal data can be exfiltrated through a single malicious link.
Aug 11
Coldcard hardware wallet vulnerability: Hackers steal over $130 million in cryptocurrency
A critical security vulnerability has recently left many Coldcard wallet users completely drained of their assets, with total losses surpassing $130 million in cryptocurrency.
Aug 5
Breakthrough AI application: Google discovers 13-year-old Chrome vulnerability and sets new patching record
Google recently confirmed that its AI implementation has achieved record-breaking patch delivery speeds, even discovering a critical vulnerability that had remained hidden for 13 years within the Chrome codebase.
Aug 3
Russian threat group exploits Microsoft OWA vulnerability: The emergence of sophisticated malware OWAReaper
A dangerous cyber attack campaign targeting Microsoft Outlook Web Access (OWA) systems has recently been discovered, directly threatening government agencies in the US and Europe.
Jul 31
VMSA-2026-0006: Up to 3 VMware vulnerabilities are rated as "Critical"
Broadcom has officially released VMware Security Advisory (VMSA-2026-0006) to urgently address 5 vulnerabilities across several of its software product lines. Notably, up to 3 vulnerabilities are rated as "Critical".
Jul 30
Adobe Acrobat Chrome vulnerability could expose WhatsApp web data
CVE-2026-48294 in Adobe Acrobat Extension could expose WhatsApp Web data. Learn who is affected, how the attack works, and what businesses should do.
Jul 28
Check Point warns of critical vulnerability actively exploited by attackers
Check Point warns that CVE-2026-16232 is being actively exploited in the wild. The vulnerability allows attackers to bypass SmartConsole authentication and gain administrative access to affected systems.
Jul 27
Ubuntu vulnerability CVE-2026-8933 enables root access
CVE-2026-8933 in snap-confine allows a local user to escalate privileges to root. Canonical has released snapd patches for Ubuntu LTS.
Jul 24
Hackers exploit Palo Alto flaw to deploy Qilin ransomware
Hackers exploited CVE-2026-0257 in Palo Alto PAN-OS to bypass GlobalProtect authentication and deploy Qilin ransomware across enterprise networks.
Jul 23
Zimbra patches vulnerability that allows malicious code to run when users open an email
Zimbra has patched a Stored XSS flaw that allows malicious emails to execute code in user sessions. Organizations should update and investigate promptly.
Jul 22
bottom of page