{"id":25614,"date":"2026-06-12T09:36:48","date_gmt":"2026-06-12T02:36:48","guid":{"rendered":"https:\/\/fpt-is.com\/en\/?p=25614"},"modified":"2026-09-23T10:59:30","modified_gmt":"2026-09-23T03:59:30","slug":"two-young-fpt-cybersecurity-experts-rank-among-patchstacks-top-15-vulnerability-researchers-with-ai-assisted-approach","status":"publish","type":"post","link":"https:\/\/fpt-is.com\/en\/two-young-fpt-cybersecurity-experts-rank-among-patchstacks-top-15-vulnerability-researchers-with-ai-assisted-approach\/","title":{"rendered":"Two young FPT cybersecurity experts rank among Patchstack\u2019s Top 15 Vulnerability Researchers with AI-assisted approach"},"content":{"rendered":"<p><strong><i>Two FPT cybersecurity experts have discovered nearly 40 security vulnerabilities affecting the global WordPress ecosystem by combining AI tools with their research, earning them spots in Patchstack\u2019s Top 15 vulnerability researcher rankings for May 2026. The achievement not only highlights FPT\u2019s technological capabilities but also demonstrates the potential of applying AI to security research, as the technology is profoundly reshaping the race between cyber offense and defense.<\/i><\/strong><\/p>\n<div id='gallery-1' class='gallery galleryid-25614 gallery-columns-2 gallery-size-full'><figure class='gallery-item'>\n\t\t\t<div class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/fpt-is.com\/en\/two-young-fpt-cybersecurity-experts-rank-among-patchstacks-top-15-vulnerability-researchers-with-ai-assisted-approach\/hai-chuyen-gia-an-ninh-mang-fpt-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-patchstack-1781237764-1790135682\/'><img decoding=\"async\" width=\"1432\" height=\"1298\" src=\"https:\/\/cdn.fpt-is.com\/en\/sites\/3\/2026\/09\/Hai-chuyen-gia-an-ninh-mang-FPT-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-Patchstack-1781237764-1790135682.jpg\" class=\"attachment-full size-full\" alt=\"Hai Chuyen Gia An Ninh Mang Fpt Ghi Dau An Tren Bang Xep Hang Cac Nha Nghien Cuu Lo Hong Bao Mat Cua Patchstack 1781237764 1790135682\" srcset=\"https:\/\/cdn.fpt-is.com\/en\/sites\/3\/2026\/09\/Hai-chuyen-gia-an-ninh-mang-FPT-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-Patchstack-1781237764-1790135682.jpg 1432w, https:\/\/cdn.fpt-is.com\/en\/sites\/3\/2026\/09\/Hai-chuyen-gia-an-ninh-mang-FPT-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-Patchstack-1781237764-1790135682-700x634.jpg 700w\" sizes=\"(max-width: 1432px) 100vw, 1432px\" \/><\/a>\n\t\t\t<\/div><\/figure><figure class='gallery-item'>\n\t\t\t<div class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/fpt-is.com\/en\/two-young-fpt-cybersecurity-experts-rank-among-patchstacks-top-15-vulnerability-researchers-with-ai-assisted-approach\/hai-chuyen-gia-an-ninh-mang-fpt-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-patchstack-2-1781237763-1790135681\/'><img decoding=\"async\" width=\"1422\" height=\"1256\" src=\"https:\/\/cdn.fpt-is.com\/en\/sites\/3\/2026\/09\/Hai-chuyen-gia-an-ninh-mang-FPT-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-Patchstack-2-1781237763-1790135681.jpg\" class=\"attachment-full size-full\" alt=\"Hai Chuyen Gia An Ninh Mang Fpt Ghi Dau An Tren Bang Xep Hang Cac Nha Nghien Cuu Lo Hong Bao Mat Cua Patchstack 2 1781237763 1790135681\" srcset=\"https:\/\/cdn.fpt-is.com\/en\/sites\/3\/2026\/09\/Hai-chuyen-gia-an-ninh-mang-FPT-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-Patchstack-2-1781237763-1790135681.jpg 1422w, https:\/\/cdn.fpt-is.com\/en\/sites\/3\/2026\/09\/Hai-chuyen-gia-an-ninh-mang-FPT-ghi-dau-an-tren-bang-xep-hang-cac-nha-nghien-cuu-lo-hong-bao-mat-cua-Patchstack-2-1781237763-1790135681-700x618.jpg 700w\" sizes=\"(max-width: 1422px) 100vw, 1422px\" \/><\/a>\n\t\t\t<\/div><\/figure>\n\t\t<\/div>\n\n<p style=\"text-align: center\"><em><span style=\"font-weight: 400\">Two FPT cybersecurity experts make their mark on Patchstack\u2019s vulnerability researcher leaderboard, ranking 9th and 14th<\/span><\/em><\/p>\n<p><span style=\"font-weight: 400\">Specifically, two cybersecurity experts from the New Technology Services Division of FPT IS, FPT Corporation \u2013 Bui Duc Tai (nickname: Dutafi) and Nguyen Quang Truong (nickname: Roll) \u2013 have made their mark on the vulnerability researcher leaderboard under Patchstack\u2019s Bug Bounty program, a vulnerability management and disclosure platform for the WordPress ecosystem. According to the May 2026 leaderboard, Bui Duc Tai ranked 9th and Nguyen Quang Truong ranked 14th globally. In total, nearly 40 vulnerabilities discovered by the two experts were validated by Patchstack and disclosed to the community during the month.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Patchstack currently operates one of the largest Bug Bounty programs for the WordPress ecosystem, bringing together a global community of cybersecurity experts to identify and report security vulnerabilities. Once validated, eligible findings are disclosed through the platform\u2019s vulnerability database, helping developers promptly address risks before they can be exploited.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Patchstack\u2019s monthly leaderboard recognizes researchers based on the number of validated vulnerabilities, the quality of their reports, and the impact of their findings. The simultaneous presence of Bui Duc Tai and Nguyen Quang Truong in the May 2026 Top 15, with nearly 40 disclosed vulnerabilities between them, demonstrates the FPT team\u2019s in-depth research capabilities and ability to identify and validate security vulnerabilities, while also reflecting the practical value of findings recognized by the international cybersecurity community.<\/span><\/p>\n<p><span style=\"font-weight: 400\">AI is profoundly changing the race between cyber offense and defense. While AI tools can automate scanning, vulnerability discovery and increasingly sophisticated attacks, the technology is also becoming a powerful assistant for cybersecurity experts in identifying threats, researching vulnerabilities and strengthening defensive capabilities.<\/span><\/p>\n<p><span style=\"font-weight: 400\">To improve research efficiency, Bui Duc Tai and Nguyen Quang Truong developed and applied a process combining source-code analysis, artificial intelligence and practical validation to identify potential security vulnerabilities within the WordPress ecosystem. Rather than relying entirely on manual reviews, AI is used to process large volumes of source code, assess context and prioritize potentially high-risk cases.<\/span><\/p>\n<p><span style=\"font-weight: 400\">The process begins with automated source-code analysis tools that scan large numbers of WordPress plugins and themes, identifying code patterns that may indicate weaknesses in access control mechanisms, unsafe input handling, or errors that could lead to exploitation. Following the initial screening, AI is used to group similar findings, eliminate noise, assess their likelihood of being genuine vulnerabilities, and help identify cases that could represent real-world security issues. A detailed account of this process is available<\/span><a href=\"https:\/\/fpt-is.com\/goc-nhin-so\/xay-dung-framework-ho-tro-phat-hien-lo-hong-wordpress-bang-ai\/?utm_source=chatgpt.com\"> <span style=\"font-weight: 400\">here<\/span><\/a><span style=\"font-weight: 400\">.<\/span><\/p>\n<p><span style=\"font-weight: 400\">As a result, the amount of work requiring manual review is significantly reduced, allowing experts to focus their resources on the highest-value cases. However, according to the experts, AI serves only as a supporting tool throughout the research process.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Every potential finding must undergo validation in a test environment before being submitted to the receiving platform for disclosure. In practice, a number of cases assessed by AI as highly credible are subsequently determined to be false positives after verification. Conversely, many complex vulnerabilities involving business logic, authorization or multi-step exploit chains still require hands-on experience, critical thinking and expert judgment from security professionals.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Sharing this approach, Bui Duc Tai said: \u201cAI helps us process large volumes of data and significantly shorten the initial review process. However, determining whether a finding is actually a vulnerability still requires human analysis, validation and assessment. AI is a powerful supporting tool, but it cannot replace security experts.\u201d<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-25617\" src=\"https:\/\/cdn.fpt-is.com\/en\/sites\/3\/2026\/09\/Su-dung-AI-de-tang-cuong-nang-luc-phong-thu-truoc-cac-cuoc-tan-cong-mang-dang-tro-thanh-xu-huong-tat-yeu-cua-nganh-an-toan-thong-tin-1781237762-1790135683.jpg\" alt=\"Su Dung Ai De Tang Cuong Nang Luc Phong Thu Truoc Cac Cuoc Tan Cong Mang Dang Tro Thanh Xu Huong Tat Yeu Cua Nganh An Toan Thong Tin 1781237762 1790135683\" width=\"700\" height=\"394\" \/><\/p>\n<p style=\"text-align: center\"><em><span style=\"font-weight: 400\">Using AI to strengthen defensive capabilities against cyberattacks is becoming an inevitable trend in cybersecurity<\/span><\/em><\/p>\n<p><span style=\"font-weight: 400\">According to the experts, AI\u2019s greatest value does not lie in replacing people, but in enabling experts to focus on tasks that require deep thinking and experience. As cyberattacks become increasingly automated and scalable through AI, leveraging the same technology to strengthen defensive capabilities is becoming an inevitable trend in cybersecurity.<\/span><\/p>\n<p><span style=\"font-weight: 400\">The achievements of Bui Duc Tai and Nguyen Quang Truong on the Patchstack leaderboard further demonstrate the quality and technological capabilities of FPT\u2019s cybersecurity experts on the international stage. This is also the result of a culture of learning, research and innovation that FPT has fostered over many years, encouraging engineers to continuously update their knowledge of new technologies, proactively solve real-world challenges and meet global technology standards.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Cybersecurity is currently one of the five key technology areas that FPT has identified for investment to meet growing demand for data protection, system security and digital trust. By significantly investing in cybersecurity capabilities, developing a highly qualified expert workforce and building a Made by FPT security solutions ecosystem, the Corporation continues to strengthen its ability to master core technologies, support the Government and businesses in building secure digital infrastructure, protect data and promote sustainable development in the AI era.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Amid increasingly sophisticated cybersecurity threats, particularly as AI transforms both offensive and defensive methods, continuously strengthening capabilities in security research, vulnerability discovery and early response will remain a key priority for FPT. These efforts will help create a safer cyberspace for customers, businesses and the wider community, while further strengthening FPT\u2019s position in cybersecurity in Vietnam and the region.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Two FPT cybersecurity experts have discovered nearly 40 security vulnerabilities affecting the global WordPress ecosystem by combining AI tools with their research, earning them spots in Patchstack\u2019s Top 15 vulnerability researcher rankings for May 2026. The achievement not only highlights FPT\u2019s technological capabilities but also demonstrates the potential of applying AI to security research, as [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":25617,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[851],"tags":[],"nang_luc":[],"dich_vu":[712],"khu_vuc":[],"linh_vuc":[],"platform":[],"san_pham":[],"class_list":["post-25614","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","dich_vu-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/posts\/25614","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/comments?post=25614"}],"version-history":[{"count":1,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/posts\/25614\/revisions"}],"predecessor-version":[{"id":25618,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/posts\/25614\/revisions\/25618"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/media\/25617"}],"wp:attachment":[{"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/media?parent=25614"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/categories?post=25614"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/tags?post=25614"},{"taxonomy":"nang_luc","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/nang_luc?post=25614"},{"taxonomy":"dich_vu","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/dich_vu?post=25614"},{"taxonomy":"khu_vuc","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/khu_vuc?post=25614"},{"taxonomy":"linh_vuc","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/linh_vuc?post=25614"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/platform?post=25614"},{"taxonomy":"san_pham","embeddable":true,"href":"https:\/\/fpt-is.com\/en\/wp-json\/wp\/v2\/san_pham?post=25614"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}