Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 ottobre 20266 min read
TrendAI™ Research
28 ottobre 2026
6 min read
Read article
TrendAI™
Security Blog
Blog in primo piano
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 ottobre 2026
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 ottobre 2026
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 ottobre 2026
Read article
Cerca articoli di ricerca
Site search
Filter by:
Phishing & BEC
Austrian Aeronautics Company Loses Over €42 Million to BEC Scam
Austria-based Fischer Advanced Composite Components AG (FACC), a major designer and manufacturer of aircraft components and systems, falls prey to a business email compromise (BEC) scheme that cost the company over 42 million euros in losses.
May 26th, 2016 3 min read
Read Article
Cyber crime
Keeping Digital Assets Safe: The Need for Data Classification
This primer discusses the importance of data classification, and how organizations can implement these strategies to reduce the effects should a data breach occur.
May 20th, 2016 2 min read
Read Article
Cybercriminal underground
2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M
Long time users of Linkedin users may very well need to change their passwords once more as a cybercriminal puts the email addresses and passwords of 117 million users up for sale.
May 18th, 2016 2 min read
Read Article
Ransomware & extortion
CryptXXX, 7ev3n Ransomware Get Major Updates
Newly-discovered ransomware strains, CryptXXX and 7ev3n, get major updates from malware authors.
May 11th, 2016 5 min read
Read Article
Ransomware & extortion
Reveton Ransomware Descendant, CryptXXX Discovered
A new ransomware strain, CryptXXX, was recently discovered making its rounds since the tail-end of March.
April 20th, 2016 4 min read
Read Article
Locky Ransomware Strain Led Kentucky Hospital to an “Internal State of Emergency”
Kentucky-based Methodist Hospital announced a ransomware attack that led to an “internal state of emergency.”
March 24th, 2016 4 min read
Read Article
The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP
Top news sites, entertainment portals, and political commentary sites were affected by a massive malvertising campaign related to the Angler Exploit Kit.
March 16th, 2016 3 min read
Read Article
Ransomware & extortion
New Crypto-Ransomware Locky Uses Malicious Word Macros
A new crypto-ransomware type called Locky has been discovered riding on document-based macros and using infection techniques borrowed from the notorious banking malware DRIDEX.
February 19th, 2016 3 min read
Read Article
Cyber crime
Frequently Asked Questions: BlackEnergy
What we know about BlackEnergy, a Trojan known to have been used in attacks on Ukraine power providers that caused a massive outage in late 2015.
February 11th, 2016 2 min read
Read Article
Phishing & BEC
Security 101: Business Email Compromise (BEC) Schemes
The Federal Bureau of Investigation (FBI) released a public service announcement earlier this year warning about Business Email Compromise (BEC) schemes. Here’s what you need to know, and what you can do to prevent attacks.
January 11th, 2016 8 min read
Read Article