On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
Earth Sirrush has repeatedly changed its tools and delivery methods, but TrendAI™ Research reveals how shared code, reused artifacts, and infrastructure patterns continue to expose the links between its campaigns.
We investigate mhyprot2.sys, a vulnerable anti-cheat driver for the popular role-playing game Genshin Impact. The driver is currently being abused by a ransomware actor to kill antivirus processes and services for mass-deploying ransomware.
We examined the potential risks associated with using the serverless environment service for secrets management.
After looking at offerings by cloud service providers (CSPs), we examined the possibilities of using a more secure serverless environment by running a custom container.
We provide an overview of cloud-native tools and examine how cybercriminals can exploit their vulnerabilities to launch supply chain attacks.
This report discusses the technical capabilities of this Cyclops Blink malware variant that targets ASUS routers and includes a list of more than 150 current and historical command-and-control (C&C) servers of the Cyclops Blink botnet.
The popularity of QR codes has created fertile ground for malicous actors to spruce up their malware tool kit for scams that steal not only personal information but also hard-earned assets that are impossible to recover once lost. We take a closer look at the different QR code-related scams and provide helpful tips on how to use QR codes safely.
This article explores the major cloud-related security threats to the IoT and discusses recommendations to help address them Some pointers on how you can improve the security of your IoT-cloud infrastructure also follows.
We looked into the security of kubectl plug-ins in Krew and how supply chains' projects can be at risk.
Smart TVs, smart refrigerators, smart cameras, and other smart devices make life at home convenient, but if left unguarded, they can inadvertently expose homes to risks. This infographic shows basic recommendations for securing these devices.
Our infographic provides a quick and comprehensive overview of Zloader, which has been involved in numerous campaigns over the past few years.
22 ottobre 2026
5 min