News & Announcements

In April 2025, a sophisticated cyber-attack campaign was discovered targeting a U.S.-based chemical company. The attacker took advantage of a serious vulnerability in the SAP NetWeaver software to install Linux Auto-Color malware. Auto-Color is a backdoor malware on the Linux platform. This malicious code has the capabilities: Execute Arbitrary Command From xa Edit and replace […]

All of Southeast Asia, including Vietnam, was in a panic after the emergence of a dangerous piece of malware called RedHook, whose goal: to forge applications of state agencies and banks in Vietnam to trick Android users into installing malware, thereby stealing personal information, bank accounts and even risking remote monitoring of the device. ​ […]

An alarming new cyberattack has emerged in Vietnam, in which the attacker uses RedHook to disguise himself under the guise of major state agencies and financial institutions. Through carefully designed scam websites, RedHook targets ordinary users to steal personal data, bank accounts and gain full control over the device. ​ RedHook is Android malware that […]

In July 2025, cybersecurity experts warned of Raven Stealer, a new malware class that steals personal information. Different from previous, complex campaigns, Raven Stealer is simple but dangerous, publicly available on GitHub and controlled via Telegram. With its easy-to-use interface and high-performance automation, the software is raising concerns about a wave of malware-as-a-services (MaaS) for […]

A campaign to spread malicious code through malicious advertising is on the rise in July 2025, targeting IT employees and system administrators directly. The objective was to release a dangerous backdoor named Oyster, which was known under aliases as Broomstick or CleanupLoader. According to experts from Arctic Wolf and CyberProof, the Oyster malware had returned […]

Security experts have recently released details of an attack technique that hijacks the Cisco ISE system through the security flaw CVE-2025 – 20281, a serious error that allows remote attackers to execute commands with root permissions. ​ ​ The CVE – 2025-20281 vulnerability is within the Cisco Identity Services Engine (ISE) system, a network access […]

Google Forms was a popular survey tool because it was easy to use and free, but now hackers are taking advantage of the platform’s reputation to launch large-scale cryptocurrency fraud campaigns. They exploit social engineering to steal electronic wallet information and appropriate property. Sophisticated phishing campaign to forge a trading floor The campaign was discovered […]

A new ransomware variant named Gunra has been found targeting the Windows operating system. This malicious code uses multi-threaded data encryption combined with the act of removing a system backup to prevent the victim from recovering the data. Gunra was first reported in April 2025 and quickly gained attention due to its technical signature of […]

Serious flaws in the Post SMTP plugin put over 200,000 WordPress websites at risk of being hijacked. This plugin currently has over 400,000 installations, and is used to replace the default wp_mail() mail function to ensure stable mail delivery and more functionality. This dangerous vulnerability was assigned the identifier CVE -2025-24000 with a CVSS score […]

On July 27, 2025, the FPTU SecAthon 2035 – an information security professional event organized by FP T University – was officially closed after a vigorous competition, bringing together 123 teams from various training institutions across the country. The competition is simultaneous at four bridge points and takes place as the Jeopardy CTF, requiring teams […]

Amazon Web Services (AWS) has announced a serious security flaw CVE – 2025-8069 in its Client VPN for Windows software, allowing attackers to escalate privileges from regular users to system administration. The cause stems from a security installation mechanism, which facilitates malicious code to be executed with full authority when the software is installed by […]

A serious security flaw has been discovered in Google Chrome, originating from an error in the improper input checks in the graphics component of Chromium, namely the ANGLE and GPU. This vulnerability allows the attacker to bypass the browser’s sandbox mechanism, opening up further access to the victim system. The vulnerability is classified under CWE […]

A sophisticated malware distribution campaign was discovered on the Steam gaming distribution platform, when the survival game “Chemia” was inserted with malware to steal user’s personal information. What is worrying is that the player can barely detect anything unusual, as the malicious code does not disrupt the gaming experience. ​ The hacker group EncryptHub (also […]

A highly sophisticated and silent cyber espionage campaign has been found to be targeting the key virtualization infrastructure and networking equipment. The attack group known as “Fire Ant”, believed to be related to UNC3886 (the hacker group associated with China) has silently infiltrated systems using VMware ESXi and vCenter Server, two core components in modern […]

A group of hackers believed to be connected to China is exploiting unpatched vulnerabilities in SharePoint Server software to install Warlock ransomware, a blackmail attack capable of encrypting entire systems, Microsoft has issued an urgent alert. ​ According to data from Microsoft’s security research group, the attack was part of a campaign by the group […]

Just days after the official patch was released, hackers figured out how to bypass the new protections, released the exploit code and started real attacks. This is no longer a potential risk, but rather a deliberate campaign that targets SharePoint — a vulnerability that has not been properly “reinforced” in many internal systems. On July […]

AhnLab’s Security Intelligence Center (ASEC) has issued a warning about the return of one of the dangerous infostealers – ACRStealer, which has “evolved” and changed its name to AmateraSealer. ​ Once available at the beginning of the year, ACRStealer has now undergone a comprehensive upgrade with the ability to hide, bypass surveillance, communicate untraceably, and […]