On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
Earth Sirrush has repeatedly changed its tools and delivery methods, but TrendAI™ Research reveals how shared code, reused artifacts, and infrastructure patterns continue to expose the links between its campaigns.
Advancements in technology continue to grow — and so do the techniques of cyberthreats. Learn how organizations can keep their evolving environments protected through dynamic and advanced security solutions.
US government contractor Electronic Warfare Associates (EWA) was infected with Ryuk ransomware, compromising web servers and subsidiary websites.
5 years after the Ashley Madison breach, cybercriminals still capitalize on the incident by introducing a new sextortion scheme.
Cybercriminals used the 2019-nCoV scare to trick people into downloading email attachments that carry the Emotet malware.
The Interpol, together with the Indonesian National Police, announced the arrest of three Indonesian men suspected of being behind Magecart attacks.
Google indefinitely suspends extensions that use the Chrome Web Store payments while Mozilla bans 197 add-ons in a quest to halt fraudulent activities.
A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices.
On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.
Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).
A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million.
22. Oktober 2026
5 min