패치 전에 두 가지 중요한 PHP 결함이 누출되었습니다. 조직이 지금 해야 할 일.
Chrome installs a 4.27 GB AI model on qualifying desktops without asking. Once it's there, any HTTPS website the user visits can run it with no consent prompt, no usage indicator, and no rate limit.
In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to businesses on October 9, and the chair of the ruling party’s cybersecurity headquarters described cyberspace as being in a “state of emergency.”
The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.
TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.
A new campaign exploiting CVE-2018-4878 involves the use of malicious spam — specifically with a spam email that with an embedded link that directs the recipient to a Microsoft Word lure document.
Vulnerabilities in Facebook’s Account Kit and how it's implemented by Tinder can potentially let hackers take over Tinder accounts using only the victim’s phone number. How does DevOps figure in the equation?
The Colorado Department of Transportation (CDOT) was hit by a variant of the SAMSAM ransomware that encrypted files and locked 2,000 of the agency’s computers.
The city of Allentown in Pennsylvania was hit with a costly malware attack. Reports point to the long-running Emotet malware as the culprit. The attack forced city officials to shut down some critical systems, and will also cost the city an estimated US$1 mill
A new ransomware called BlackRuby was discovered with a unique feature: besides encrypting files for ransom, it also installs a Monero cryptominer.
Users of a lightweight blogging platform maybe have had their database passwords exposed on a public log. This issue brings around DevOps concerns, as well as questions about data protection regulations and compliance.
The Financial Services Information Sharing and Analysis Center (FS-ISAC) surveyed various chief information security officers (CISO) in the financial industry on some of their primary priorities when it comes to improving security for their organizations
Two cryptocurrency incidents made the news recently: one concerning a new campaign from the threat actor known as the Lazarus Group, and the other involving a scam by one of the many new cryptocurrency startups.
Digital extortion is one of the most lucrative ways cybercriminals can profit in today’s threat landscape. Many have fallen victim to this particular scheme and been bilked of their money —- from ordinary users to big enterprises.
Two cryptocurrency-related security incidents occurred during the past couple of days, adding to the rising number of attacks that target digital currency.
2026년 11월 5일 
6 min read