Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 października 20266 min read
TrendAI™ Research
28 października 2026
6 min read
Read article
TrendAI™
Blog o bezpieczeństwie
Polecane blogi
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 października 2026
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 października 2026
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 października 2026
Read article
Wyszukaj artykuły
Site search
Filter by:
Cloud security
Serverless Applications: What They Mean in DevOps
Analysis of over 1,000 open-source serverless applications revealed that 21% of them have critical vulnerabilities or were misconfigured. What does this mean for DevOps?
April 13th, 2018 3 min read
Read Article
Cyber crime
Tesla and Jenkins Servers Fall Victim to Cryptominers
Vulnerable enterprise servers are being compromised by individuals or groups looking for resources to mine cryptocurrency. The latest victims are automobile-maker Tesla and users of Jenkins servers.
February 21st, 2018 3 min read
Read Article
Malware
New AndroRAT Exploits Allow for Permanent Rooting
A new variant of Android Remote Access Tool can inject root exploits to perform malicious tasks such as silent installation, shell command execution, WiFi password collection, and more. It targets CVE-2015-1805, a vulnerability disclosed in 2016.
February 13th, 2018 3 min read
Read Article
Exploits & Zero-DaysTargeted attacks
North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets
In a security alert posted on its website on January 31, The South Korean Computer Emergency Response Team (KR-CERT) warned of a zero-day vulnerability in Adobe Flash player that could be maliciously exploited.
February 2nd, 2018 3 min read
Read Article
Google’s DoubleClick Abused to Deliver Miners
On January 24, 2018, we observed that the number of Coinhive web miner detections tripled due to a malvertising campaign. Attackers seem to have abused Google’s DoubleClick, which provides internet ad serving services, for traffic distribution.
January 26th, 2018 2 min read
Read Article
Exploits & Zero-Days
Meltdown and Spectre Intel Processor Vulnerabilities: What You Need to Know
Microsoft, Linux, Google, and Apple started rolling out patches addressing design flaws in processor chips that security researchers named Meltdown and Spectre. What are they, and how can they affect users?
January 4th, 2018 3 min read
Read Article
Cyber threats
Digmine Miner Spreading via Facebook Messenger
A new cryptocurrency-mining bot is spreading through Facebook Messenger. We named this Digmine based on the moniker (비트코인 채굴기 bot) it was referred to in a report of recent related incidents in South Korea.
December 21st, 2017 5 min read
Read Article
Cloud
Data on 123 Million US Households Exposed Due to Misconfigured AWS S3 Bucket
A year that saw major data breaches, including some notable ones from companies like Uber and Equifax, just saw another breach that will likely rank as among 2017’s most notable incidents.
December 20th, 2017 2 min read
Read Article
Exploits & Zero-Days
17-Year Old MS Office Flaw (CVE-2017-11882) Actively Exploited in the Wild
Several threat actors are actively exploiting CVE-2017-11882 to deliver a plethora of threats, including the information-stealing Loki, Pony/FAREIT, and a lockscreen with a ransom note that resembles Bad Rabbit's.
December 8th, 2017 3 min read
Read Article
Uber Breach Exposes the Data of 57 Million Drivers and Users
In a highly publicized data breach incident, rideshare application Uber announced that the personal information of 57 million customers and drivers were potentially compromised in October 2016.
November 22nd, 2017 4 min read
Read Article