패치 전에 두 가지 중요한 PHP 결함이 누출되었습니다. 조직이 지금 해야 할 일.
Chrome installs a 4.27 GB AI model on qualifying desktops without asking. Once it's there, any HTTPS website the user visits can run it with no consent prompt, no usage indicator, and no rate limit.
In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to businesses on October 9, and the chair of the ruling party’s cybersecurity headquarters described cyberspace as being in a “state of emergency.”
The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.
TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.
Researchers found US-based traffic systems vulnerable to data spoofing attacks, where smart intersections are tricked into indirectly causing traffic slowdowns.
The EU General Data Protection Regulation (GDPR) is weeks away. A Google paper on the right to be forgotten highlights challenges to GDPR compliance, particularly the right to erasure. What are the the implications for organizations?
Users of cryptocurrency exchange Binance began noticing irregular trading on the platform a few days ago. An investigation revealed an organized and large-scale scheme to transfer bitcoin to several malicious actors. Automatic alarms were triggered and Binance
There has been a sudden surge of memcached servers being abused for DDoS attacks. Proof-of-concept exploit codes have been published, but mitigation techniques and an update from the service provider are also available.
Researchers have discovered a vulnerability in the mail transfer agent (MTA) Exim. If exploited, attackers could execute arbitrary code on vulnerable servers remotely. Exim has already released a patch for this and urges everyone to update immediately.
RMH Franchise Holdings (RMH), which owns and operates more than 160 Applebee’s restaurants, recently disclosed that malware were uncovered on their point-of-sale (PoS) systems.
An update of the Spectre attacks called SgxPectre can obtain data from Intel's SGX enclaves, which are supposedly secure repositories for sensitive and valuable data.
Attackers abuse memcached servers to cause the biggest DDoS attack recorded. The target-- software development platforms GitHub-- was down for only 10 minutes.
A lot of best practices teach users how to prevent or defend against phishing attacks, but how can organizations actively detect and thwart them before users even see them?
A new Mirai variant dubbed as OMG was found targeting IoT devices and can turn them into proxy servers, aside from Mirai’s original denial-of-service attack capabilities.
2026년 11월 5일 
6 min read