What is CMC Cyber Security's biggest risk?

The biggest risk is losing ground to Viettel Cyber Security, a state-backed rival holding roughly 60% of Vietnam's managed security services market as of January 2026 and now expanding into Japan and the Philippines. A second risk is internal: parent CMC Corporation is redirecting its strategic bets toward AI, and it remains unclear whether the cyber unit will get standalone budget, a question due for clarity around the July 31, 2026 AGM.

Is CMC Cyber Security in financial trouble?

Not by the parent company's numbers. CMC Corporation posted FY2025/26 revenue of VND 9.56 trillion, up 16.6% year over year, and net income of VND 402.84 billion, up about 32% year over year, both as of March 31, 2026. However, CMC Corporation's market cap fell 13-18% year over year to roughly VND 6.3-6.6 trillion as of June 15, 2026, showing investor caution despite the revenue growth.

Who are CMC Cyber Security's biggest competitors?

Its main rival is Viettel Cyber Security, which dominates with about 60% of Vietnam's managed security services market as of January 2026 and continues pulling BFSI and enterprise clients from CMC. It also contends with FPT Information System, VNPT Information Security Center, and CyRadar/Bkav in a fragmented market where the top five players together hold under 35% share as of January 2026.

Is CMC Cyber Security at risk from AI?

Partly. AI-driven SOC automation and XDR platforms, such as IGLOO's AI triage tools, threaten to shrink the tier-1 SOC analyst work CMC currently bills for, which could squeeze service margins. That said, CMC's broad managed SOC capability and installed base of over 3,000 organizations, including most of Vietnam's largest firms, give it some cushion against this shift so far.

How does CMC Cyber Security compare to its peers?

CMC ranks around 6th of 12 companies in its cohort, running a broader managed SOC offering than several smaller domestic peers, which is a point in its favor. But it trails state-backed Viettel Cyber Security, which holds roughly 60% of Vietnam's managed security services market as of January 2026, reflecting how much ground CMC has yet to reclaim.

What should I watch to see if CMC Cyber Security is gaining or losing ground?

Watch CMC Corporation's AGM disclosures expected July 31, 2026, which should reveal whether the cyber unit gets standalone budget under the new AI-X strategy, with clarity expected by August 15, 2026. Also watch for the formal forensic report on the April 2025 Crypto24 ransomware breach, expected by December 31, 2026, which will show how CMC handled a significant security incident of its own.

Cybersecurity companies · subsidiary of CMC Corporation · Vietnam

CMC Cyber Security

Cybersecurity arm of Vietnam's CMC Corporation, running SOC, pentest, and threat-intel services.

Losing its protection

Assessed 30 July 2026 · Evidence as of 30 July 2026

The structural protection is eroding.

On the recordSince 30 July 2026 · Checkable from July 2026 · Every call on the record Checkpoint: Vietnam Cybersecurity Law (Luat An ninh mang 2025) takes effect, resetting compliance and breach-disclosure demand

The call

CMC Cyber Security sits inside a profitable, credentialed conglomerate but faces a state-backed rival and depends on a Korean partner for the AI layer it doesn't own.

CMC Cyber Security monitors networks, scans for vulnerabilities, and provides threat information as part of a larger Vietnamese company. The work is getting easier for artificial intelligence to do, and CMC is betting on a partnership with a Korean AI company called IGLOO instead of building its own AI technology. Meanwhile, a stronger state-backed competitor called Viettel Cyber Security (spun off in April 2025 with government backing and 500 specialists) is expanding into the same market with more resources and no political obstacles, and new Vietnamese cybersecurity laws taking effect around July 2026 could favor the government-connected player. The picture could shift if CMC's IGLOO partnership wins major bank and financial company clients and proves it works better than competitors within the next two quarters, or if how CMC handled a 2024 ransomware breach affects its reputation under new Vietnamese breach-disclosure rules.

Why

AI pressure: IGLOO Corporation (Korea) AI-driven SOC/detection platform. CMC resells IGLOO's AI detection instead of owning proprietary threat data, so it has no unique layer if IGLOO sells direct or rivals match it. Could AI do the core job? Only partly.

Bigger players: Viettel Cyber Security (Ministry of Defense spinout, April 2025). State-backed Viettel unit launched with about 500 specialists and a regional expansion mandate, competing for the same regulated-sector clients. Could a giant copy it? Yes, easily.

What protects it. Longstanding Ministry of Defense partnership, CREST certification, and its parent conglomerate's balance sheet and government ties.

What would change this call

Whether IGLOO-CMC partnership names verified BFSI clients with measured MTTR gains by late 2026. Shows CMC can differentiate on AI security, not just resell someone else's model.
Publication (or continued absence) of a forensic report on the April 2025 Crypto24 breach under Vietnam's new disclosure law. Shows whether reputational and regulatory fallout from the breach is resolved or lingering.
Whether Viettel Cyber Security announces new regulated-sector or government contracts after July 2026 Cybersecurity Law takes effect. Shows state-backed rival capturing share CMC is positioned to lose.

Key numbers

CMC Corporation FY2026 revenue VND 9.56 trillion, up 16.6% (2026-03-31)
CMC Corporation net income up 32.23% YoY (2026-03-31)
IGLOO AI partnership for BFSI signed March 2026 (2026-03-24)

Named risks

April 2025 Crypto24 ransomware breach of parent CMC Group remains without a published forensic report. Severity: high
State-backed Viettel Cyber Security, better resourced and expanding regionally, could erode CMC's account base. Severity: high
Core SOC, scanning and threat-intel services face AI-driven commoditization highlighted in CMC's own marketing. Severity: medium
CMC resells South Korea's IGLOO AI rather than owning a proprietary detection layer, limiting differentiation. Severity: medium
Fragmented market (top 5 vendors under 35% share) means no durable share lead for CMC. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
Viettel Cyber Security	gaining on	State-backed spin-out with 500 specialists since April 2025, regional expansion to Japan and Philippines
FPT Information System Security	contesting	Security arm of Vietnam's largest IT services firm, overlapping SOC and consulting catalog as of 2026-02
Bkav Corporation	contesting	Holds over 70% of Vietnam's domestic antivirus market per Wikipedia, 2026-07-30
AWS, IBM, Cisco (global entrants)	contesting	Blocked from full domestic access by data sovereignty and licensing rules per Mordor Intelligence, 2026-01-26

Questions people ask

What is CMC Cyber Security's biggest risk?: The biggest risk is losing ground to Viettel Cyber Security, a state-backed rival holding roughly 60% of Vietnam's managed security services market as of January 2026 and now expanding into Japan and the Philippines. A second risk is internal: parent CMC Corporation is redirecting its strategic bets toward AI, and it remains unclear whether the cyber unit will get standalone budget, a question due for clarity around the July 31, 2026 AGM.
Is CMC Cyber Security in financial trouble?: Not by the parent company's numbers. CMC Corporation posted FY2025/26 revenue of VND 9.56 trillion, up 16.6% year over year, and net income of VND 402.84 billion, up about 32% year over year, both as of March 31, 2026. However, CMC Corporation's market cap fell 13-18% year over year to roughly VND 6.3-6.6 trillion as of June 15, 2026, showing investor caution despite the revenue growth.
Who are CMC Cyber Security's biggest competitors?: Its main rival is Viettel Cyber Security, which dominates with about 60% of Vietnam's managed security services market as of January 2026 and continues pulling BFSI and enterprise clients from CMC. It also contends with FPT Information System, VNPT Information Security Center, and CyRadar/Bkav in a fragmented market where the top five players together hold under 35% share as of January 2026.
Is CMC Cyber Security at risk from AI?: Partly. AI-driven SOC automation and XDR platforms, such as IGLOO's AI triage tools, threaten to shrink the tier-1 SOC analyst work CMC currently bills for, which could squeeze service margins. That said, CMC's broad managed SOC capability and installed base of over 3,000 organizations, including most of Vietnam's largest firms, give it some cushion against this shift so far.
How does CMC Cyber Security compare to its peers?: CMC ranks around 6th of 12 companies in its cohort, running a broader managed SOC offering than several smaller domestic peers, which is a point in its favor. But it trails state-backed Viettel Cyber Security, which holds roughly 60% of Vietnam's managed security services market as of January 2026, reflecting how much ground CMC has yet to reclaim.
What should I watch to see if CMC Cyber Security is gaining or losing ground?: Watch CMC Corporation's AGM disclosures expected July 31, 2026, which should reveal whether the cyber unit gets standalone budget under the new AI-X strategy, with clarity expected by August 15, 2026. Also watch for the formal forensic report on the April 2025 Crypto24 ransomware breach, expected by December 31, 2026, which will show how CMC handled a significant security incident of its own.

Timeline

2026-07-24South Korea reported building security-focused foundation model backed by 256 Nvidia B200 GPUs
2026-07-22CMC Cyber Security site publishes AI self-healing attack content, hospital digital-signature rollouts noted
2026-05-31CMC Cyber Security obtained CREST certification for Pentest and SOC services
2026-05-27OpenAI government cybersecurity program expanded into South Korea
2026-03-24CMC Cyber Security signed AI SOC partnership with South Korea's IGLOO Corporation
2026-01-26Mordor Intelligence reported Vietnam top 5 cybersecurity vendors hold under 35% combined share
2025-04-30Viettel Cyber Security spun out with about 500 specialists and regional expansion mandate
2025-04-18CMC Group hit by Crypto24 ransomware attack, about 2TB exfiltrated, no forensic report published
2023-12-31CMC Cyber Security named among Vietnam's Top 10 Information Security companies

Head to head

CMC Cyber Security vs Viettel Cyber Security

Revision history

30 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Seqrite Meiya Pico NSFOCUS