
TrendAI™
Security Blog

Ausgewählte Blogs

Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
Nach Fachartikeln suchen
Filter by:
KOVTER: An Evolving Malware Gone Fileless
KOVTER is one example of a constantly evolving malware. Initially starting out as a police ransomware, it eventually evolved into a much more effective and evasive fileless malware. Here is a closer look at KOVTER, and how organizations can lessen its impact.
Android Backdoor GhostCtrl Records Your Audio, Video
The RETADUP worm that affected Israeli hospitals turned out have bigger impact than we first thought. It was accompanied by an even more dangerous threat: an Android malware that can take over the device. We’ve named this Android backdoor GhostCtrl.
Security 101: The Impact of Cryptocurrency-Mining Malware
As cryptocurrencies like bitcoin are more widely used, so will the threats that cybercriminals use to abuse it. Here’s a closer look at cryptocurrency-mining malware—their emergence in the threat landscape, impact, and some countermeasures against them.
Frequently Asked Questions: The Petya Ransomware Outbreak
The Petya ransomware family has reemerged, becoming one of the most impactful yet. Is it similar to WannaCry? Does it have a kill switch? Here are some frequently asked questions about the threat.
The Trail of BlackTech’s Cyber Espionage Campaigns
Following the activities and evolving tactics of cyberespionage group BlackTech helped us uncover the proverbial red string of fate that connected three seemingly disparate campaigns: PLEAD, Shrouded Crossbow, and of late, Waterbear.
Erebus Resurfaces as Linux Ransomware
On June 10, South Korean web hosting company NAYANA was hit by Erebus ransomware (detected by Trend Micro as RANSOM_ELFEREBUS.A), infecting 153 Linux servers and over 3,400 business websites the company hosts.
Erebus Linux Ransomware: Impact to Servers and Countermeasures
A South Korean web hosting company was hit by a Linux version of the Erebus ransomware. Here’s what you need to know about the threat and what sysadmins can do to defend against it.
Security 101: The Rise of Fileless Threats that Abuse PowerShell
Filess malware that abuse Windows’ PowerShell are now increasingly becoming more common—from ransomware, click-fraud malware to Trojan downloaders. Here’s a closer look on how to mitigate these threats.
WannaCry/Wcry Ransomware: How to Defend against It
Here’s what you need to know about this ongoing threat and what you can do to protect against it.
Persirai: New IoT Botnet Targets IP Cameras
A new IoT botnet called Persirai has been discovered targeting over 1,000 IP Camera models based on various Original Equipment Manufacturer (OEM) products.