90 officers, soldiers and experts from units across the country participated in the 2026 national cybersecurity exercise, with a scenario of attacking the system of a financial institution.

The 2026 National Cyber ​​Security Exercise program was held on October 27 in Hanoi, organized by the Cyber ​​Security Department - Ministry of Public Security in coordination with the National Cyber ​​Security Association NCA. This year, the program simulates an attack on the information system of a financial institution, requiring teams to both protect the system and investigate traces of the attack.

The practice session lasted 7.5 hours continuously, with the participation of 90 officers, soldiers and experts from units specializing in cybersecurity protection of a number of ministries, branches and Cyber ​​Security Departments of 32 provinces and cities. Members are divided into 10 teams.

The new feature of the program is to combine defense with direct investigation. Teams must focus on monitoring, detecting and promptly preventing attacks to protect the system; Simultaneously analyze logs, trace the behavior of cyber criminals through stages of the attack, localize, troubleshoot, restore system operations and collect electronic evidence for investigation.

The investigation part is scored in the form of CTF (Capture The Flag), including 43 challenges. Each team's results will reflect both its defense capabilities and its ability to investigate cybersecurity incidents.

"The program contributes to strengthening the coordination mechanism between specialized forces, ministries, branches, financial institutions and cyber security businesses," the organizing committee's announcement said.

According to the organizers, recently, cyber security risks have continued to become complicated. Attack groups intentionally maintain operations targeting important national security information systems and critical infrastructure.

One of the tricks is to use ransomware combined with data theft to exert double pressure. In addition, cybercriminals exploit AI to spoof voices and images, automate phishing, and develop malware. Attacks through the supply chain, third-party service providers and illegal trading of personal data are also considered "increasingly common". Meanwhile, the capacity to protect network security and the inter-sectoral coordination mechanism "sometimes and in some places lack synchronization".

The organizing committee also assessed finance and banking as one of the top targets of cybercriminals. Cyber ​​security incidents at financial institutions can cause property damage, expose customer data, disrupt payments and affect people's trust.

In addition to the practice session, the program has a seminar for leaders of the Cyber ​​Security Department of the Police of provinces and cities and cyber security units of ministries and branches. The content discusses new points of the Law on Cyber ​​Security, the Law on Personal Data Protection and guiding documents; appraisal of information system level documents; Cyber ​​security training and exercises in the AI ​​era; along with technology trends and related technical standards.

Liu Quy