Author: tungcmc

Phân tích về lỗ hổng CVE-2023-23397 trong Microsoft Outlook
24 Mar

Phân tích về lỗ hổng CVE-2023-23397 trong Microsoft Outlook

I. Giới thiệu

CVE-2023-23397 là một lỗ hổng nâng cao đặc quyền/bỏ qua xác thực quan trọng trong Outlook, được phát hành trong March Patch Tuesday của Microsoft. Lỗ hổng ảnh hưởng đến tất cả các phiên bản của Windows Outlook, được xếp hạng 9,8 CVSS và là một trong hai zero-day được tiết lộ vào ngày 14 tháng 3.

II. Phân tích

CVE-2023-23397 là lỗ hổng nâng cao đặc quyền (EoP) trong Microsoft Outlook. Đây là một zero-touch exploit, có nghĩa là lỗ hổng bảo mật yêu cầu mức độ phức tạp thấp để khai thác và không yêu cầu tương tác của người dùng.

Tin tặc đã khai thác lỗ hổng CVE-2023-23397 bằng cách lợi dụng tính năng tạo lịch hẹn phổ biến trên Outlook – cho phép gửi email thông báo đến người dùng, từ đó đánh cắp mã băm NTLM của người dùng từ xa.

Kẻ tấn công gửi một tin nhắn cho nạn nhân với thuộc tính Message Application Program Interface (MAPI) mở rộng với đường dẫn Universal Naming Convention (UNC) tới  Server Message Block (SMB, via TCP 445) do kẻ tấn công kiểm soát. Kẻ tấn công gửi lời mời lịch độc hại.msg — định dạng thông báo hỗ trợ lời nhắc trong Outlook — để kích hoạt điểm API dễ bị tấn công PlayReminderSound bằng cách sử dụng “PidLidReminderFileParameter” (tùy chọn âm thanh cảnh báo tùy chỉnh cho lời nhắc).

Khi nạn nhân kết nối với máy chủ SMB của kẻ tấn công, máy chủ này sẽ tự động gửi thông báo New Technology LAN Manager (NTLM) tới người dùng, tin nhắn này có thể được sử dụng để xác thực đối với các hệ thống khác hỗ trợ xác thực NTLM.

Băm NTLMv2 là giao thức mới nhất mà Windows sử dụng để xác thực và giao thức này được dùng cho một số dịch vụ với mỗi phản hồi chứa biểu diễn băm của thông tin người dùng, chẳng hạn như tên người dùng và mật khẩu. Do đó, kẻ tấn công có thể thực hiện một cuộc tấn công chuyển tiếp NTLM để giành quyền truy cập vào các dịch vụ khác hoặc xâm phạm toàn bộ miền nếu người dùng bị xâm phạm là quản trị viên. Mặc dù các dịch vụ trực tuyến như Microsoft 365 không dễ bị tấn công bởi vì chúng không hỗ trợ xác thực NTLM, ứng dụng Microsoft 365 Windows Outlook vẫn dễ bị tấn công.

Tương tác của người dùng là không cần thiết để kích hoạt (ngay cả trước khi xem trước tin nhắn), cũng như không yêu cầu đặc quyền cao. CVE-2023-23397 là một lỗ hổng zero-touch được kích hoạt khi nạn nhân nhận được lời nhắc và thông báo (ví dụ: khi một cuộc hẹn hoặc nhiệm vụ nhắc năm phút trước thời gian được chỉ định). Rất khó để chặn lưu lượng SMB gửi đi cho người dùng từ xa. Kẻ tấn công có thể sử dụng cùng thông tin đăng nhập để có quyền truy cập vào các tài nguyên khác.

*Các kịch bản tấn công có thể xảy ra

  • Lateral movement: điều hướng độc hại bằng cách sử dụng hàm băm NTLM được chuyển tiếp

Các cuộc tấn công chuyển tiếp đã trở nên nổi tiếng như một trường hợp sử dụng cho Mimikatz bằng cách sử dụng thói quen kết xuất thông tin đăng nhập NTLM thông qua module sekurlsa. Ngoài ra, các cuộc tấn công pass-the-hat (PtH) (hoặc pass-the hash) và các biến thể của hành vi trộm cắp dữ liệu và thông tin có thể được thực hiện. Khi những kẻ tấn công đã ở trong hệ thống, chúng có thể sử dụng mạng để di chuyển và điều hướng các tuyến của tổ chức qua SMB.

  • Truyền payload thông qua WebDAV

Kẻ tấn công có thể tận dụng các dịch vụ WebDAV trong trường hợp không có dịch vụ SMB hợp lệ cho Outlook tồn tại (nghĩa là không được định cấu hình) trong máy khách. Đây là một giải pháp thay thế cho dịch vụ Web/HTTP cũng có thể được đọc dưới dạng đường dẫn UNC bởi các mục .msg và/hoặc Outlook Calendar. Những kẻ tấn công có thể thiết lập một máy chủ WebDAV độc hại để phản hồi các máy khách nạn nhân bị ảnh hưởng bằng các trang độc hại. Các trang này có thể chứa mã bao gồm việc tận dụng kỹ thuật duyệt thư mục tương tự như lỗ hổng CVE-2022-34713 của Microsoft (được đặt tên là DogWalk) để đẩy bất kỳ hình thức tải trọng nào nhằm thực thi mã từ xa, chẳng hạn như webshell.

III.  Khuyến nghị

Để ngăn chặn các cuộc tấn công bằng cách khai thác lỗ hổng CVE-2023-23397:

  • Người dùng cần áp dụng bản vá có sẵn ngay lập tức.
  • Thêm người dùng vào nhóm Protected Users trên Active Directory và chặn outbound SMB (TCP cổng 445).
  • Microsoft đã cung cấp tài liệu và đoạn script có sẵn để giúp các tổ chức kiểm tra xem hệ thống có đang bị ảnh hưởng hay không.

Trước tình hình ngày càng gia tăng của các cuộc tấn công mạng và những lỗ hổng mới được phát hiện mỗi ngày, CVE-2023-23397 trên Microsoft Outlook là một minh chứng rõ ràng cho sự cần thiết của việc bảo vệ hệ thống và dữ liệu cá nhân nhằm tránh bị kẻ xấu thu thập thông tin như tài khoản, địa chỉ email làm mục tiêu để tấn công. Việc nhanh chóng cập nhật bản vá và áp dụng các giải pháp an ninh khác trong doanh nghiệp hoặc tổ chức cần được thực hiện luôn và ngay.

CMC Cyber Security tham gia Hội thảo – Triển lãm Quốc tế Ngày An toàn Thông tin Việt Nam 2020
25 Dec

CMC Cyber Security participated in the Workshop - International Exhibition of Vietnam Information Security Day 2020

On December 2, 2020, the International Exhibition "Vietnam Information Security Day" in 2020 took place with the theme: "Safety and security of the network Make in Vietnam - The key factor in Transformation. country number ”. Affirming its leading position in the field of network safety and security, CMC Corporation is honored to accompany the seminar as the main Sponsor.

The event was attended by Mr. Nguyen Manh Hung - Minister of Information and Communications, Vice Chairman of the National Committee for E-Government, Mr. Nguyen Thanh Hung - Former Deputy Minister of Information and Communications, President Hiep Vietnam Association of Information Security, Mr. Hoang Minh Son - Deputy Minister of Education and Training, Mr. Le Quang Huy - Vice Chairman of Committee for Science, Technology and Environment, Ministry of National Assembly, ...

Minister of Information and Communications Nguyen Manh Hung visits the booth at the International Conference - Exhibition "Vietnam Information Security Day" 2020

Speaking at the opening ceremony, Mr. Nguyen Thanh Hung - Chairman of Vietnam Information Security Association said: “The country's information security capacity is based on an important foundation that is products, services and solutions in the cybersecurity ecosystem owned by Vietnamese enterprises. Make in Vietnam products, services and solutions are ready to ensure safety and network security for digital transformation family ”.

Emphasizing the importance of Make in Vietnam products, solutions and information security services, Minister of Information and Communications Nguyen Manh Hung said: “To protect Vietnam's prosperity on cyberspace, we need to master the ATANM product ecosystem and build a strong ATANM industry. Vietnam has owned 90% ecosystem of ATANM products to serve Party and State agencies. Only by the beginning of 2021, Vietnam will fully reach 100%. Very few countries in the world do this. This is the pride of Vietnam. ”

Minister of Information and Communication Nguyen Manh Hung speaking at the Conference

As a member of the ATANM Vietnam Product Ecosystem Development Alliance, CMC Corporation is one of the first Vietnamese enterprises to own 100% of the ecosystem. Coming to the exhibition space, CMC Technology Group made a mark with the CMC Security Ecosystem eco-booth with the message "Securing your Digital Transformation" to help protect the IT systems of agencies and organizations (frontier network, network internal, terminal, data, application and policy management) against cyber attacks with “Make in Vietnam” products / services. The booth and CMC Security Ecosystem ecosystem received great attention from attendees.

CMC Technology Group makes a mark with the CMC Security Ecosystem eco-stall with the message “Securing your Digital Transformation” 

As a member of the ATANM Vietnam Product Ecosystem Development Alliance, CMC Corporation is one of the first Vietnamese enterprises to own 100% of the ecosystem. Coming to the exhibition space, CMC Technology Group made a mark with the CMC Security Ecosystem eco-booth with the message "Securing your Digital Transformation" to help protect the IT systems of agencies and organizations (frontier network, network internal, terminal, data, application and policy management) against cyber attacks with “Make in Vietnam” products / services. The booth and CMC Security Ecosystem ecosystem received great attention from attendees.

On the topic "Safety and security in the digital transformation process", Mr. Luong Tuan Thanh - Senior Vice President cum Technology Director of CMC Corporation made a report on "Building a platform for safety monitoring, intelligent network security for digital ecosystems ”. Mr. Thanh stated the commitment of CMC Corporation to contribute to building a secure ecosystem for network security in Vietnam: CMC Corporation will provide 01 year license to use anti-virus software CMC Internet Security for small-scale businesses and organizations. For businesses and organizations that have their own IT systems, CMC encourages the registration of using the monitoring and defense solution of CMDD. CMC is ready to help businesses and organizations use free 06-month CMDD service package to experience. In addition, CMC wishes to expand cooperation with cybersecurity companies to share potential incidents and risks both at home and abroad.

Mr. Luong Tuan Thanh - Senior Vice President and Chief Technology Officer of CMC Corporation reported on the topic "Safety and security in the digital transformation process"

Also at the seminar, CMC Cloud of CMC Corporation was honored to be recognized as one of the 05 "Make in Vietnam" cloud computing platforms that meet the technical criteria and criteria for e-government. e-government. The cloud computing platform provided by CMC Technology Group meets the 1145 / BTTTT-CATTT set of criteria towards building e-Government with 153 criteria. The CMC Cloud platform has unlimited scalability and is currently serving up to 1.5 PB customers.

Sharing about three difficulties that CMC Telecom as well as other companies providing cloud computing platforms are facing at the seminar "Vietnam's secure cloud computing platform for digital transformation", Mr. Dang Tung Son - Deputy General Director of CMC Telecom said: strict requirements on information security; localization problem to meet the requirements of quality of products and services, customer experience, especially information security; and human resource problem. To solve the above problems, CMC Corporation is strongly supplementing human resources, because the story of information security and security is a story of expertise.

Participating in the afternoon session "Digital transformation in socio-economic fields and safety, cybersecurity", Deputy General Director of CMC Cyber Security Ha The Phuong discussed security challenges in the digital transformation process of Vietnamese organizations, government agencies and enterprises. Discussion issues revolve around how to ensure data security when businesses implement digitalization, risk management measures, quality control of outsourced service partners, and It was important that the seminar had the same point of view: “Ensuring security and security is a continuous, periodic and never-ending process. We must always have the right, reasonable and continuous investment to solve the ATANM problem ”.

Mr. Ha The Phuong - Deputy General Director of CMC Cyber Security participated in the seminar "Digital transformation in the field of socio-economic and safety issues, network security"

CMC Cyber Security tặng một năm sử dụng bản quyền giải pháp phòng chống mã độc cho doanh nghiệp
08 Dec

CMC Cyber Security donates one year to use the copyright of anti-malware solution for businesses

CMC Cyber Ses Company provides 01 year license to use anti-virus software CMC Internet Security for businesses and small organizations. For businesses and organizations with their own IT systems, CMC encourages the registration of the use of surveillance and defense solutions CMDD (CMC Malware Detection and Defense). CMC is ready to help businesses and organizations use free 06-month CMDD service package to experience.

This Group's CMC Security Ecosystem eco-stall marks and captures the attention of event attendees

On December 2, 2020, the International Exhibition "Vietnam Information Security Day" in 2020 took place with the theme: "Safety and security of the network Make in Vietnam - The key factor in Transformation. country number ”. On the topic "Safety and security in the digital transformation process" within the framework of the event, Mr. Luong Tuan Thanh - Senior Vice President and Chief Technology Officer of CMC Corporation made a report on "Building a safe surveillance platform, intelligent network security for the digital ecosystem". Mr. Thanh stated the commitment of CMC Corporation to contribute to building a safe ecosystem for network security in Vietnam. Accordingly, from December 2, 2020, CMC Corporation will provide 01 year license to use anti-virus software CMC Internet Security for small-scale businesses and organizations. For businesses and organizations that have their own IT systems, CMC encourages the registration of using the monitoring and defense solution of CMDD and is willing to support organizations to use the free 06-month CMDD service package to experience. . In addition, CMC wishes to expand cooperation with cybersecurity companies to share potential incidents and risks both at home and abroad.

Minister of Information and Communications Nguyen Manh Hung visits the booth at the International Conference - Exhibition "Vietnam Information Security Day" 2020

At the event, Minister of Information and Communications Nguyen Manh Hung said: “To protect Vietnam's prosperity on cyberspace, we need to master the ATANM product ecosystem and build a foundation. strong ATANM industry ”. According to Hung, Vietnam has owned 90% of the ATANM product ecosystem to serve Party and State agencies. Only by the beginning of 2021, Vietnam will fully reach 100%. Very few countries in the world do this. As a member of the ATANM Vietnam Product Ecosystem Development Alliance, CMC Technology Corporation is one of the first Vietnamese enterprises to own 100% of the ecosystem.

To register for free use of CMC Internet Security and Anti-Malware Solution CMDD, please register via the link: https://cmcav.vn/dang-ky-dung-thu /

Information about CMC Internet Security malware prevention solution and CMDD malware prevention solution:

Information published by you: https://doanhnhansaigon.vn/it/cmc-cung-cap-giai-phap-phong-chong-ma-doc-mien-phi-cho-doanh-nghiep-1102178.html

CMC làm chủ 100% hệ sinh thái an toàn an ninh mạng
03 Dec

CMC owns 100% of security ecosystem for network security

As a member of the Vietnam Alliance for the Development of Safe and Secure Product Ecosystems (ATANM), CMC Corporation is one of the first Vietnamese enterprises to own 100% of the ATANM ecosystem.

CMC Security Ecosystem

Coming to the exhibition space at the Workshop - International Exhibition of Information Security Day (ATTT) Vietnam 2020 with the theme: “Safety and cybersecurity Make in Vietnam - The key factor in national digital transformation ”, CMC Corporation made a mark with the CMC Security Ecosystem ecosystem booth and the message“ Securing your Digital Transformation ”to help protect the IT systems of agencies and organizations (border networks, intranets, equipment terminal, data, application and management policy) against cyber attacks with “Make in Vietnam” products / services. The booth and CMC Security Ecosystem ecosystem received great attention from attendees.

CMC làm chủ 100% hệ sinh thái an toàn an ninh mạng - Ảnh 1.

The booth and CMC Security Ecosystem ecosystem received great attention from attendees.

On the topic "Safety and security in the digital transformation process", Mr. Luong Tuan Thanh - Senior Vice President cum Technology Director of CMC Corporation presented a report on "Building Platforms. intelligent safety monitoring, network security for digital ecosystem ”.

Mr. Thanh stated the commitment of CMC Corporation to contribute to building ATANM Vietnam ecosystem: CMC Corporation will provide CMC Antivirus solution completely free of charge for organizations, business within 1 year from today. In addition, CMC wishes to expand cooperation with cybersecurity companies to share potential incidents and risks both at home and abroad.

Cloud computing platform "Make in Vietnam"

Also at the seminar, CMC Cloud of CMC Corporation was honored to be recognized as one of 5 "Make in Vietnam" cloud computing platforms that meet the technical criteria and criteria for e-government. e-government.

The cloud computing platform provided by CMC Technology Group meets the 1145 / BTTTT-CATTT set of criteria towards building e-Government with 153 criteria. The CMC Cloud platform has unlimited scalability and is currently serving up to 1.5 PB customers.

At the seminar "Vietnam secure cloud computing platform for digital transformation, Mr. Dang Tung Son - Deputy General Director of CMC Telecom shared about three difficulties that CMC Telecom as well as companies providing the platform. Cloud computing are all facing. That is a strict requirement on information security and security; localization problem to meet the requirements of quality of products and services, customer experience, especially information security; and human resource problem.

Participating in the seminar "Digital transformation in the field of socio-economic and safety issues, cybersecurity", Deputy General Director of CMC Cyber Security Ha The Phuong discussed the challenges of security in the digital transformation process of Vietnamese organizations, government agencies and enterprises.

Discussion issues revolve around how to ensure data security when businesses implement digitalization, risk management measures, quality control of outsourced service partners, and It was important that the seminar had the same point of view: “Ensuring security and security is a continuous, periodic and never-ending process. We must always have the right, reasonable and continuous investment to solve the ATANM problem ”.

Đăng ký tham gia miễn phí AVAR 2020 Virtual
19 Nov

Sign up for free AVAR 2020 Virtual

This year's AVAR 2020 Virtual will be held online. Conferences are held for the information security community.
This is the only forum where world-renowned security experts and researchers gather, exchange and share insights and solutions to prevent malware and cyber security attacks. .
The program will be livestreamed at 9:00 a.m. to December 4, 2020, Vietnam time. Everyone can join the livestream at any time and fast forward and review or pause the show easily.
Coming to the "AVAR 2020 Virtual" conference, attendees will have access to the latest trends in security with a variety of presentations. In addition, the program also creates opportunities to exchange, build relationships as well as ask questions and answers with leading experts in the field of security for event participants.
👉Event registration link and program details: https://aavar.org/avar2020/
🎯Topics will be covered in AVAR 2020 Virtual: https://aavar.org/avar2020/index.php/agenda/.
The Anti-Virus Asian Researchers Association is a non-governmental organization established in 1998 in Hong Kong. The association brings together more than 200 members including many leading researchers and enterprises in the field of Information Security around the world such as the US, Japan, China, UK, India ...
The Association's main mission is to connect international security researchers, create a common voice in research, prevent the spread of malware and help fight Security crimes. worldwide network.
Previously, CMC Cyber Security Company also hosted AVAR 2015 in Da Nang. This is an honor and a great joy for the company in particular and for the information security industry in Vietnam in general.
5 sản phẩm, dịch vụ của CMC Cyber Security đạt danh hiệu “Chìa khóa vàng 2020”
18 Nov

5 products and services of CMC Cyber Security awarded the title "Golden Key 2020"

In the morning of November 18, 2020, in Hanoi, Vietnam Information Security Association (VNISA) held a ceremony to announce and award the title "Golden Key 2020". In which, CMC Cyber Security Company has 5 products and services that won awards in three categories.
  1. CMDD Centralized Administration and Malware Prevention Solution
  2. CMC information security surveillance and defense solution
  3. CMC web application firewall 
  4. CMC penetration test assessment service
  5. CMC Information Security Surveillance Service

5 products and services of CMC Cyber Security awarded the title "Golden Key 2020"

Specifically, the products. CMC Cyber Security Company's services won the title of "Golden Key", including: Anti-Malware Solution and Centralized Administration CMDD, CMC Information Security Defense and Monitoring Solution won the title of "Key gold "2020 for excellent high quality information security products; CMC web application firewall won the title of "Golden Key" 2020 for excellent prospects of information security products; CMC intrusion testing service and CMC Information Security Surveillance Service won the title of "Golden Key" 2020 for typical information security services

The program of voting for the title "Golden Key" 2020 continues and replaces the program of voting for high quality, typical information security products and services from 2015 of VNISA in coordination with the Department of Information Security. Information under the Ministry of Information and Communication organization.

Mr. Ha The Phuong - Deputy General Director of CMC Cyber Security shared

At the ceremony, representatives of enterprises with many award winning products and services, Mr. Ha The Phuong - Deputy General Director of CMC Cyber Security, said: “Number of units and quantity of make-in products and services Vietnam is both higher than last year. This proves that our industry is thriving and that more and more new companies are appearing on the market. This also motivates long-time companies in the market to constantly renew themselves, develop new technologies, invest more in a team of experts to compete, and improve the industry average.

In addition, the assessment is also stricter and stricter, closer to international standards, which will help companies who make products to pay more attention to the output quality of products. service by itself, narrowing the quality gap of Vietnamese products with international ones.

CMC received the award at "Golden Key Award Ceremony 2020"

In particular, this award will definitely contribute significantly in the communication, product and service business. Customers, the market will also have an additional yardstick, a criterion for selecting domestic products that suit their investment needs. ”

This is an annual activity within the framework of VNISA's Vietnam Information Security Day event starting in 2020. The program aims to honor Vietnamese security companies who have made many efforts, step by step affirming their advantages. quality and the ability to meet the market of ATTT products and services Make in Vietnam.

This year, according to the Organizing Committee, there are 56 products from 18 participating enterprises, the number of products increased over last year by 87%. This is a good sign, product quality has also improved over the previous year. Through the program, it will contribute to promoting the image of domestic products and services, creating confidence for users, thereby expanding the market for businesses.

The program of voting for the title "Golden Key" has the participants of which are products and services to ensure information safety and IT products and applications with safety and security features by enterprises and organizations. Vietnam owns, owns technology, is capable of mass production, has been commercialized or supplied to the market. The categories of votes are specific for excellent and outstanding products and services, which are evaluated to meet the prescribed criteria.

Notably, this year CMC Cyber Security Company has added a new solution "CMC Web Application Firewall" awarded the title of "Golden Key" 2020 for excellent prospects of information security products. The CMC Web Application Firewall (C-WAF) solution is part of the information security suite provided by CMC CS to the organization's website applications with a layer of firewall that protects the websites. APIs before attacks and threats are known or never before with powerful ruleset tools that incorporate AI to enhance performance.

As it works, C-WAF provides continuous protection for website and applications that use network traffic analysis and only allow valid access requests through. This product is a type of security assurance for website system and API.

Speaking at the awards ceremony, Deputy Minister of Information and Communications Nguyen Huy Dung emphasized that the awarding of the title "Golden Key" 2020 to the above products and services has affirmed the quality and superiority. and effectiveness of products and services owned by Vietnamese organizations and enterprises in terms of technology. This is an activity in response to the national digital transformation program and the Government's "Make in Vietnam" strategy.

In addition, the organization of voting and recognition of the title "Golden Key" also contributes to support advertising activities, trade promotion, enhancing competitiveness and expanding the market. The results of the voting programs are also an important information channel for state management agencies to have a clearer view of the market for food safety products and services and to offer incentive and supportive policies for businesses. Vietnam appropriately

The voting council for the title "Golden Key" for High Quality Information Security Products and Services 2020 was also established, including 21 members who are leading managers and experts in information security. of Vietnam. The Chairman of the Council is Mr. Nguyen Thanh Hung, President of VNISA.

CMC Information Security Company Limited (CMC Cyber Security) was established in 2008 with the mission of developing information security products and services for individual and business customers, and anti-code solutions. information security services. With a staff of 70 people, bringing together more than 45 leading IT and security engineers, a team of engineers and experts with international degrees and certificates in security such as PCI QSA, ISO 27001 Lead Auditor, CEH ... and experienced in handling many major information security incidents in Vietnam, 100% of products and solutions provided to the market by CMC Cyber Security are self-researched and distributed by Vietnamese people. is flexible and suitable to the needs of many types of customers from the Government, finance, businesses to individual users. CMC Cyber Security is currently the only Vietnamese member of the Asian Association of Malware Researchers (AVAR) and the International Computer Security Alliance (ICSA), all of CMC Cyber Secyrity products and services. The services are strictly accredited to international standards and are supported by security experts from these reputable organizations.

CMC đón tiếp Đoàn công tác của Chủ tịch UBND tỉnh Thừa Thiên Huế đến thăm và làm việc
11 Nov

CMC welcomed the delegation of Chairman of Thua Thien Hue Provincial People's Committee to visit and work

On the afternoon of November 10, 2020, Chairman of Thua Thien Hue Provincial People's Committee Phan Ngoc Tho led the delegation of Thua Thien Hue Provincial People's Committee to visit and work at CMC Corporation - the leading IT - Telecommunication enterprise in Vietnam. The delegation also had the participation of Mr. Nguyen Xuan Son, Director of Department of Information and Communications of Thua Thien Hue Province.

On behalf of the Board of Directors of CMC Corporation, Mr. Nguyen Trung Chinh - Chairman of the Board of Directors expressed his joy to welcome the delegation of Chairman of Thua Thien Hue Provincial People's Committee. At the beginning of the meeting, Mr. Nguyen Trung Chinh gave an overview of CMC Corporation and its information technology capacity. At the same time, Mr. Chinh also shared about the goals, orientations and development strategies of CMC Group in the next 5 years.

Chairman Nguyen Trung Chinh welcomed the delegation of People's Committee of Thua Thien Hue province 

Mr. Chinh emphasized: “CMC aims to become a global corporation, build an open infrastructure ecosystem, contribute to making Vietnam become the Digital Hub of the Asia-Pacific region, connect data and share knowledge with Global. In addition, CMC also wants to form and develop digital service centers, specializing in providing information technology services as well as BPO services to countries around the world. Over the years of accompanying Hue University, CMC Group understands the capacity and highly appreciates the human resources of Thua Thien Hue province. CMC affirms always wants to accompany Thua Thien Hue province to build a developed social environment to attract and retain talented people.

On the side of the mission, Chairman Phan Ngoc Tho expressed his wish that businesses, especially leading IT - Telecommunication enterprises such as CMC Corporation, chose Thua Thien Hue province as the place to build their facilities. , research facility, contributing to attracting resources and contributing to the development of the province. Mr. Tho introduced opportunities to attract businesses to invest in Thua Thien Hue province, especially in the field of information technology. More specifically, the province is building an investment attraction policy and environment; to formulate legal support policies and preferential IT policies in order to build an ideal environment for IT businesses to have strong development conditions in Thua Thien Hue.

In addition, Chairman Nguyen Trung Chinh said that CMC Corporation is ready to provide the Group's latest IT application solutions in land management, planning problems, and building smart cities “Smart City ”to contribute to the development of Thua Thien Hue province.

Thua Thien Hue Provincial People's Committee visited the CMC Institute of Technology and Application Research (CIST)

At the end of the meeting, the delegation of Thua Thien Hue Provincial People's Committee visited the Data Center, the NextGen SOC and NextGen SOC and CMC Institute of Technology Application Research (CIST).

Phần mềm diệt virus miễn phí CMC Antivirus kỷ niệm 12 năm ra mắt
28 Oct

CMC Antivirus free antivirus software celebrates the 12th anniversary of its launch

CMC Antivirus (CMC AV) is a completely free anti-virus software for individual users researched and developed by experts of CMC Cyber Security Company.
The product provides security and global control of the input and output data of the system and protects the computer from: Viruses, Spyware, Worm ... The ability to protect computers of CMC Antivirus is no less than Other famous Antivirus software you already know.
CMC Antivirus combines advanced technology to ensure you a total solution to protect your computer. CMC Cyber Security currently has main product lines: products for personal users free of charge (CMC Antivirus), products for personal users to pay (CMC Internet Security) and products for businesses. (CMC Malware Detection and Defense).
With products for individual users, CMC Antivirus provides security and global control of data in and out of the system while protecting your computer from: Viruses, Spyware, Worm, Ransomeware … By scanning files, e-mails, and web pages as you visit them.
👉Customers can go to the following link: https://cmccybersecurity.com/cmc-antivirus-free/ to download and install CMC ANTIVIRUS products.
🎯Currently, CMC Antivirus has a new updated version compared to the previous versions such as:
✅Interface changes.
✅Faster installation.
✅Scanning and processing speed for viruses is significantly increased while consuming less resources.
✅Enhance the thorough handling of malicious processes running on the system.
✅Eliminate the risk of malware infection from USB.
✅Detect and retrieve original content from fake documents and remove fake documents folder, shortcut, ...
With 12 years of product development, Mr. Vu Lam Bang - Director of CMC Cyber Security Product Research & Development Center wishes CMC Antivirus will become the most used free anti-virus software in Vietnam. .
Mr. Bang also added that CMC Cyber Security Company will continue to provide completely free-to-use products for Vietnamese users to contribute to the common goal of ensuring information security for users. In addition, CMC CS also hopes that the centralized anti-malware solution CMDD (CMC Malware Detection and Defense) will be further deployed to serve the needs of state management.
📛CMC Antivirus helps you to protect your computer comprehensively and is especially FREE for individual users!
CMC Cyber Security tham gia Hội nghị tập huấn ngành và hội thao công nghệ thông tin toàn quân 2020
27 Oct

CMC Cyber Security participates in the industry training conference and the all-military information technology festival 2020

On October 26-27, 2020, at the Guest House of the Ministry of National Defense, CMC Cyber Security Company participated in the "Industry Training Conference and All-Army Information Technology Festival 2020" by the Cyber Operations Command. (BTL 86) organization.
At the program, CMC Cyber Security brought to the booth the company's products and services to display and introduce, including the anti-malware solution CMDD (CMC Malware Detection and Defense) and the Center for Operations Security and Safety. CMC SOC information.
Participating in this year's festival were 123 officers in charge of IT from 41 focal points of the Ministry of Defense; General Departments, Military Zones, Army Corps, Military Services, and Military Services; Institutes, schools and centers under the Ministry of Defense. In one day, the contestants competed in 3 contents: Examining knowledge of industry management; skills to ensure information security and skills to deploy secure network models.
In the framework of the training conference, the seminar "Improving the quality of IT work and cyber combat operations at agencies and units throughout the army" was also held.
The sport was organized to test perceptions of the entire IT staff of the entire army about the direction documents, professional guidance on industry management; comprehensively assess the capacity and qualifications of professional staff in IT technical assurance and information security assurance. Through the sports festival, BTL 86 and agencies and units will organize to draw experience in directing and renewing organizational methods, training and training content to improve the quality of the IT team. .
Some other photos at the event:
Ông Hà Thế Phương, Phó Tổng Giám đốc Công ty CMC Cyber Security phát biểu tại sự kiện
CMC tham dự khai mạc ITU Virtual Digital Word 2020
21 Oct

CMC attended the opening ceremony of ITU Virtual Digital Word 2020

On 20/10/2020, the Conference and Online Exhibition of the Digital World (ITU Digital World) 2020 officially opened. After 50 years held in different countries, for the first time, according to the initiative of Vietnam this year, the World Telecommunication Exhibition to Vietnam was renamed the Digital World Exhibition - The complete virtual exhibition. on Make In Vietnam platforms.
Coming to the digital exhibition space at the event, CMC introduced to the guests strong products / services, including: Information Security Product Group of CMC Cyber Security; product group "Cloud computing" of CMC Telecom and product group of Research Institute and Technology Application CMC -CIST.
CMC is honored to be the gold sponsor accompanying the event and is also one of the three enterprises participating in the Conference of Ministers of ITU member countries, seminars associated with the development of the digital world, and exhibitions. online with national pavilions and showcases by leading corporations worldwide.
Taking place in Vietnam, ITU Digital World 2020 is of great significance, contributing to enhancing the country's status and affirming its role as one of the fast-growing and dynamic countries in telecommunications and information technology. active and responsible members of the ITU.
For CMC, a business that constantly strives to take the lead when it comes to digital transformation in Vietnam, plays a role in promoting the country's general digital transformation, this is a great opportunity. for CMC and major domestic and international corporations / technology organizations to connect and move towards technological solutions to global problems.
Right after the conference was opened, the exhibition space was opened at the address https://digitalworld2020.vn/cmc. The event will take place for 3 days from October 20-22, 2020.
Some pictures at the event: