On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
Earth Sirrush has repeatedly changed its tools and delivery methods, but TrendAI™ Research reveals how shared code, reused artifacts, and infrastructure patterns continue to expose the links between its campaigns.
Notorious IoT malware Mirai has seen a recent increase in updates as a new variant emerges and a new vulnerability is targeted.
An RCE vulnerability affecting Windows have been discovered, with Microsoft rating its severity as critical.
New ransomware variant Nefilim is distributed through exposed Remote Desktop Protocol (RDP) and threatens to release stolen data to the public.
Paradise ransomware can now spread through Internet Query Files.
As the use of IoT extends beyond the home and goes into the vast industrial landscape, the scale of threats likewise grows.
Trend Micro researchers detected a new Ursnif campaign that targets Japan and spreads through malicious word document files.
New variants of notorious banking trojan Trickbot was distributed via DLL and had features that focus on Windows 10.
While the .NET framework is originally intended to help software engineers, cybercriminals have found a way to abuse its features to compile and execute malware on the fly.
A WordPress GDPR plugin for managing cookies exposed sites to a vulnerability that allowed privilege escalation.
Nemty ransomware was spread through love letter emails, complete with romantic email subjects and nothing but a winky emoticon in the email body.
22 octobre 2026
5 min