Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 ottobre 20266 min read
TrendAI™ Research
28 ottobre 2026
6 min read
Read article
TrendAI™
Security Blog
Blog in primo piano
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 ottobre 2026
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 ottobre 2026
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 ottobre 2026
Read article
Cerca articoli di ricerca
Site search
Filter by:
Cyber crime
Malware Using Exploits from Shadow Brokers Leak Reportedly in the Wild
Exploits found in the trove of malware recently leaked by hacking group Shadow Brokers are reportedly being used to install ransomware and backdoor. Are your systems protected?
April 26th, 2017 6 min read
Read Article
Ransomware & extortion
Ransomware Recap: Expanding Distribution Methods
This week's recap highlights new distribution methods that make ransomware more unpredictable in terms of how they infect their victims.
April 25th, 2017 4 min read
Read Article
APTsCyber espionage
Pawn Storm Abuses OAuth In Social Engineering Attacks
This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.
April 25th, 2017 4 min read
Read Article
IoT & smart devices
BrickerBot Malware Emerges, Permanently Bricks IoT Devices
A recently uncovered malware Brickerbot is making the rounds with the capability to permanently brick Internet of Things (IoT) devices. How can it be mitigated?
April 19th, 2017 4 min read
Read Article
Exploits & Zero-Days
Shadow Brokers Leaks Hacking Tools: What it Means for Enterprises
Hacking group Shadow Brokers recently leaked a new trove of information-stealing tools and exploits targeting Windows systems and servers. What does this mean for enterprises?
April 18th, 2017 5 min read
Read Article
IoT & smart devices
Infosec Guide: Dealing with Threats to a Bring Your Own Device (BYOD) Environment
This Infosec Guide will tackle the primary threats organizations face when implementing BYOD programs, as well as best practices and solutions to mitigate these threats.
April 17th, 2017 7 min read
Read Article
Targeted attacks
Operation Cloud Hopper: What You Need to Know
A global cyberespionage campaign has been uncovered compromising managed IT service providers, using them as in-betweens to attack their targets. Here’s what you need to know.
April 10th, 2017 4 min read
Read Article
Exploits & Zero-Days
Apache Struts 2 Vulnerability Leads to RCE
We looked into past several Remote Code Execution (RCE) vulnerabilities reported in Apache Struts, and observed that in most of them, attackers have used Object Graph Navigation Language (OGNL) expressions.
March 9th, 2017 3 min read
Read Article
Malware
The Michelangelo Virus, 25 Years Later
The Michelangelo virus scare remains a significant turning point for computer security, 25 years after its supposed major impact,
March 6th, 2017 3 min read
Read Article
Phishing & BEC
Best Practices: Identifying and Mitigating Phishing Attacks
Despite being one of the oldest scams on the internet, phishing continues to be a significant problem for both individuals and organizations. Here are some methods to identify and deal with potential phishing attempts.
February 10th, 2017 7 min read
Read Article