Cyber propagandaGenerative AI
Matryoshka Returns, Targeting US Midterm Candidates With AI-Generated Fake Claims
2026년 11월 2일2 min read
Asako Koizumi, Philippe Lin
2026년 11월 2일
2 min read
Read article
TrendAI™
보안 블로그
추천 블로그
BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
2026년 11월 2일 15 min
Read article
Virtual Patching: Protect Sooner, Before the Patch Lands
2026년 11월 1일
Read article
Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
2026년 10월 28일 6 min
Read article
연구 논문 검색
Site search
Filter by:
Exploits & Zero-Days
Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601
Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).
January 17th, 2020 2 min read
Read Article
Cyber crimeMalware
Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts
An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries.
January 16th, 2020 2 min read
Read Article
Phishing & BEC
Texas School District Loses $2.3 Million to Phishing Scam, BEC
A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million.
January 15th, 2020 2 min read
Read Article
Ransomware & extortion
Sodinokibi Ransomware Increases Yearend Activity, Targets Airport and Other Businesses
The Sodinokibi ransomware ended the year with a bang by launching a new round of attacks aimed at multiple organizations, including the Albany International Airport and the foreign exchange company Travelex.
January 13th, 2020 3 min read
Read Article
OT & critical infrastructureTargeted attacks
Dymalloy, Electrum, and Xenotime Hacking Groups Set Their Targets on US Energy Sector
At least three hacking groups have been identified aiming to interfere with or disrupt power grids across the United States. Attempts in attacking the utilities industry are on the rise, according to a report on the state of industrial control systems (ICSs).
January 10th, 2020 3 min read
Read Article
MalwareBotnetsCryptocurrency
Cryptocurrency Miner Uses Hacking Tool Haiduc and App Hider Xhide to Brute Force Machines and Servers
The cryptocurrency-miner, a multi-component threat comprised of different Perl and Bash scripts, miner binaries, the application hider Xhide, and a scanner tool, propagates by scanning vulnerable machines and brute-forcing (primarily default) credentials.
January 9th, 2020
Read Article
Exploits & Zero-Days
Patched Microsoft Access ‘MDB Leaker’ (CVE-2019-1463) Exposes Sensitive Data in Database Files
Researchers uncovered an information disclosure vulnerability (designated as CVE-2019-1463) affecting Microsoft Access, which occurs when the software fails to properly handle objects in memory.
January 8th, 2020 2 min read
Read Article
Cyber crime
Web Skimming Attack on Blue Bear Affects School Admin Software Users
A web skimming attack was used to target a school administration software that handles school accounting, student fees, and online stores for K-12 and other educational institutions.
January 7th, 2020 2 min read
Read Article
Ransomware & extortion
Ransomware Recap: Clop, DeathRansom, and Maze Ransomware
As the new year rolls in, new developments in different ransomware strains have emerged. Here we discuss the different techniques that Clop, DeathRansom, and Maze ransomware use and the ways users and organizations can protect themselves against infection.
January 6th, 2020 4 min read
Read Article
APTs
First Binder Exploit Linked to SideWinder APT Group
We found malicious apps that work together to compromise devices and collect user data. One of the apps, called Camero, exploits CVE-2019-2215, a flaw that exists in Binder. This is the first instance in the wild that exploits said UAF vulnerability.
January 6th, 2020 5 min read
Read Article