패치 전에 두 가지 중요한 PHP 결함이 누출되었습니다. 조직이 지금 해야 할 일.
Chrome installs a 4.27 GB AI model on qualifying desktops without asking. Once it's there, any HTTPS website the user visits can run it with no consent prompt, no usage indicator, and no rate limit.
In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to businesses on October 9, and the chair of the ruling party’s cybersecurity headquarters described cyberspace as being in a “state of emergency.”
The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.
TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.
The official Monero site was found compromised after discovering a coin stealer malware in the CLI wallet that is available for download in the site. Evidence showed that the downloadable wallets were tampered with to contain the malware.
The AnteFrigus ransomware is delivered via a malvertising campaign to lure victims to the RIG exploit kit server, while the PureLocker ransomware, has been observed to launch targeted attacks against enterprise production servers.
Our latest research explored threats to 5G connectivity — from SIMjacking, identity fraud, fake news, and poisoning machine learning rules to manipulating business decisions — and found that they can be addressed through an identity-based approach to security.
Over the past month, threat actors have been using a relatively non-conventional approach to mount a flurry of distributed denial-of-service (DDoS) attacks: through TCP amplification.
YouTube videos were being used in a scam to deliver an information-stealing Trojan called Predator the Thief.
There are plans to update the BlueKeep Metasploit exploit after recent investigations revealed that the exploit triggers the blue screen of death in devices. This comes after recent reports of BlueKeep being used to install cryptocurrency miners on vulnerable
Another company has disclosed that that they were hit by a ransomware attack, this time involving the encryption of the customer data of SmarterASP.net, a popular hosting service provider for ASP.NET.
Researchers discovered a vulnerability in Amazon’s Ring Video Doorbell Pro that, if exploited, could allow a threat actor to get network or Wi-Fi credentials.
We have developed a machine learning model called TrendX Hybrid Model that uses two training phases — pre-training and training — and allows us to correlate static and behavior features to improve detection rates and reduce false positives.
An Android bug allows threat actors to transfer a malicious application to a nearby Near Field Communication (NFC)-enabled device via the Android Beam.
2026년 11월 5일 
6 min read