Topic

Practical cybersecurity

Incident analysis, new cybersecurity regulation, web app and API protection, and how organizations build defenses they run themselves.

SolutionsCybersecurity

13 Entries

What Dokploy is: a self-hosted deployment platform for small teams

Deep dive

08.15.2026

What Dokploy is: a self-hosted deployment platform for small teams

Dokploy gives you a Heroku-style deployment workflow on your own server. What it does, what sits inside it, who it suits, and the three things newcomers trip over in production.

Read ↗

Securing Dokploy: adding a WAF and IPS on the server itself

Deep dive

07.20.2026

Securing Dokploy: adding a WAF and IPS on the server itself

A default Dokploy install runs fine but is not safe: Traefik is not a WAF, Docker bypasses UFW, DNS-only domains leak the origin IP. Three gaps and how to close them on your own host.

Read ↗

Vietnam's 2025 Cybersecurity Law: 5-level system classification and what to do

News

07.01.2026

Vietnam's 2025 Cybersecurity Law: 5-level system classification and what to do

From 1 July 2026, Cybersecurity Law 116/2025 merges two prior laws, codifies "data security" and classifies systems into 5 levels. The new obligations and what to do.

Read ↗

Hansoll hit by ransomware: how manufacturing and FDI firms defend

News

06.16.2026

Hansoll hit by ransomware: how manufacturing and FDI firms defend

The ransomware case targeting Hansoll Textile shows manufacturing and FDI firms are also targets. Practical defense lessons for manufacturers.

Read ↗

Two ministry systems breached, SOC "blind": why modern monitoring matters

News

05.26.2026

Two ministry systems breached, SOC "blind": why modern monitoring matters

At Vietnam Security Summit 2026, the cyber agency disclosed two ministry-level incidents that on-site SOCs missed. Lessons on monitoring and protection.

Read ↗

Why businesses need WAAP for web applications

Deep dive

05.20.2026

Why businesses need WAAP for web applications

Attacks on web apps and APIs keep growing. WAAP blocks most of them.

Read ↗

Cybersecurity trends 2026: agentic AI, leakware, and how to defend

Deep dive

03.28.2026

Cybersecurity trends 2026: agentic AI, leakware, and how to defend

In 2026, AI-automated attacks, identity as a target, and a shift from encryption to data theft. How Vietnamese businesses prepare their defense.

Read ↗

Directive 57-CT/TW: tightening data security in the state sector

News

01.28.2026

Directive 57-CT/TW: tightening data security in the state sector

The Secretariat's Directive 57-CT/TW demands stronger cybersecurity and data security across the political system. What the state sector must do.

Read ↗

The 2025 cybersecurity report: fewer attacks but more damaging

News

01.18.2026

The 2025 cybersecurity report: fewer attacks but more damaging

The 2025 cybersecurity report shows fewer attacks but more organizations harmed, with data the top target. What businesses should read from it.

Read ↗

Enterprise cybersecurity in Vietnam: from ransom encryption to data-theft extortion

Cornerstone

12.16.2025

Enterprise cybersecurity in Vietnam: from ransom encryption to data-theft extortion

Attackers have moved from encrypting data for ransom to stealing it for extortion. A layered defense architecture, clear ownership, and a first-90-days checklist.

Read ↗

A third-party and SaaS risk-governance checklist for businesses

Deep dive

11.25.2025

A third-party and SaaS risk-governance checklist for businesses

A secure system is not enough if data leaks through a vendor. A practical lifecycle checklist for third-party/SaaS risk: due diligence, integration, monitoring, response.

Read ↗

The Vietnam Airlines breach via a SaaS partner: a supply-chain lesson

News

11.11.2025

The Vietnam Airlines breach via a SaaS partner: a supply-chain lesson

It wasn't Vietnam Airlines' systems that were attacked, but a third-party platform. Unpacking the October 2025 breach and its SaaS supply-chain, OAuth-token lessons.

Read ↗

The CIC incident: when a centralized data store becomes the target

News

09.15.2025

The CIC incident: when a centralized data store becomes the target

The CIC attack (~160 million records) shows that the more centralized a data store, the more valuable a target. Lessons on access control and protection.

Read ↗