Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 octobre 20266 min read
TrendAI™ Research
28 octobre 2026
6 min read
Read article
TrendAI™
Security Blog
Blogs à la une
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 octobre 2026
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 octobre 2026
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 octobre 2026
Read article
Rechercher des articles de recherche
Site search
Filter by:
Malware
Bashlite Updated with Mining and Backdoor Commands
We uncovered an updated Bashlite malware designed to add infected internet-of-things devices to a distributed-denial-of-service (DDoS) botnet. Based on the Metasploit module it exploits, the malware targets devices with the WeMo UPnP API.
April 3rd, 2019 5 min read
Read Article
Phishing & BEC
Google and Facebook Fraudster Pleads Guilty to $100 million Scam
A business email compromise (BEC) scheme took more than $100 million from Facebook and Google. Legitimate-looking invoices, contracts and more fooled the two tech companies and they wired millions to the fraudsters over a period of years.
March 26th, 2019 2 min read
Read Article
Cyber crime
A Hacking Group is Stealing Popular Instagram Profiles
Social media influencers could be seen as trophies by hackers. This includes a photographer with more than 15,000 followers on Instagram who had her account stolen.
February 28th, 2019 5 min read
Read Article
IoT & smart devicesMalware
Beauty Camera Apps Send Users Porn, Collects Pictures
We discovered several beauty camera apps (detected as AndroidOS_BadCamera.HRX) on Google Play that are capable of accessing remote ad configuration servers that can be used for malicious purposes. Some of these have been downloaded millions of times.
January 30th, 2019 3 min read
Read Article
Malware
Google Play Apps Drop Anubis, Use Motion-based Evasion
We found malicious apps on Google Play trying to drop a banking malware payload on unsuspecting users. Motion sensor data was used to evade detection.
January 17th, 2019 4 min read
Read Article
Disguised Adware Infect 9 Million Google Play Users
We recently discovered an active adware family (detected by Trend Micro as AndroidOS_HidenAd) disguised as 85 game, TV, and remote control simulator apps on the Google Play store.
January 8th, 2019 3 min read
Read Article
Malware
Security 101: Defending Against Fileless Malware
Fileless threats aren’t as visible compared to traditional malware and employ a variety of techniques to stay persistent. Here's a closer look at how fileless malware work and what can be done to thwart them.
December 20th, 2018 12 min read
Read Article
Malware
Malicious Memes that Communicate with Malware
We recently discovered malicious actors using steganography on memes. It should be noted that the malware was not downloaded from Twitter and that we did not observe what specific mechanism was used to deliver the malware to its victims.
December 14th, 2018 3 min read
Read Article
Hacker Infects Node.js Package to Steal from Bitcoin Wallets
A Node.js module with nearly two million downloads a week was compromised after the library was injected with malicious code programmed to steal bitcoins in wallet apps.
November 29th, 2018 3 min read
Read Article
AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT
BLADABINDI’s customizability and seeming availability in the underground make it a prevalent threat. Last week, we came across a worm (Worm.Win32.BLADABINDI.AA) that propagates through removable drives and installs a fileless version of BLADABINDI.
November 27th, 2018 4 min read
Read Article