Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 de octubre de 20266 min read
TrendAI™ Research
28 de octubre de 2026
6 min read
Read article
TrendAI™
Security Blog
Blogs destacados
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 de octubre de 2026
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 de octubre de 2026
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 de octubre de 2026
Read article
Buscar artículos de investigación
Site search
Filter by:
Software supply chain
Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers
An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII).
January 27th, 2020 3 min read
Read Article
Phishing & BEC
NetWire RAT Hidden in IMG Files Deployed in BEC Campaign
A recent BEC campaign targets organizations by sending them emails with IMG (disk imaging) file attachments hiding a NetWire remote access trojan.
January 23rd, 2020 2 min read
Read Article
Cyber crime
Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment
A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras.
January 22nd, 2020 3 min read
Read Article
IoT & smart devices
Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices
A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices.
January 21st, 2020 3 min read
Read Article
Exploits & Zero-Days
Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided
On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.
January 20th, 2020 3 min read
Read Article
Exploits & Zero-Days
Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601
Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).
January 17th, 2020 2 min read
Read Article
Cyber crimeMalware
Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts
An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries.
January 16th, 2020 2 min read
Read Article
Phishing & BEC
Texas School District Loses $2.3 Million to Phishing Scam, BEC
A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million.
January 15th, 2020 2 min read
Read Article
Ransomware & extortion
Sodinokibi Ransomware Increases Yearend Activity, Targets Airport and Other Businesses
The Sodinokibi ransomware ended the year with a bang by launching a new round of attacks aimed at multiple organizations, including the Albany International Airport and the foreign exchange company Travelex.
January 13th, 2020 3 min read
Read Article
OT & critical infrastructureTargeted attacks
Dymalloy, Electrum, and Xenotime Hacking Groups Set Their Targets on US Energy Sector
At least three hacking groups have been identified aiming to interfere with or disrupt power grids across the United States. Attempts in attacking the utilities industry are on the rise, according to a report on the state of industrial control systems (ICSs).
January 10th, 2020 3 min read
Read Article