패치 전에 두 가지 중요한 PHP 결함이 누출되었습니다. 조직이 지금 해야 할 일.
Chrome installs a 4.27 GB AI model on qualifying desktops without asking. Once it's there, any HTTPS website the user visits can run it with no consent prompt, no usage indicator, and no rate limit.
In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to businesses on October 9, and the chair of the ruling party’s cybersecurity headquarters described cyberspace as being in a “state of emergency.”
The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.
TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.
Schneider Electric released several advisories on vulnerabilities they have recently fixed in their EcoStruxure and Modicon industrial control products.
Multiple government procurement services were targeted by a credential harvesting campaign that uses bogus pages to steal login credentials.
What is the current state of SCADA vulnerabilities? Staying informed is essential in the fight against exploits and cyberattacks with real-world consequences.
Researchers found hundreds of malicious Android apps to steal users' information, install adware, and access devices via excessive permissions.
We break down the digital attacks against the oil and gas industry and its supply chain.
Snatch ransomware is capable of forcing Windows machines to reboot into Safe Mode. Zeppelin ransomware, on the other hand, was responsible for infecting healthcare and IT organizations across Europe and the U.S.
We found new iterations of Trickbot with updates on its password-grabbing module, all targeting new apps and services.
Ryuk’s decryptor tool — provided by the threat actors behind the ransomware to victims who have paid ransom demands — could actually cause data loss instead of reinstating file access to users.
A BEC campaign successfully steals US$1 million seed funding meant for an Israeli startup from a Chinese venture capital firm.
Maksim Yakubets, who allegedly runs Russia-based Evil Corp, the cybercriminal organization that developed and distributed banking malware Dridex, has been indicted in the United States by the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC).
2026년 11월 5일 
6 min read