Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 de outubro de 20266 min read
TrendAI™ Research
28 de outubro de 2026
6 min read
Read article
TrendAI™
Blog de Segurança
Blogs em Destaque
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 de outubro de 2026
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 de outubro de 2026
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 de outubro de 2026
Read article
Pesquisar por artigos de pesquisa
Site search
Filter by:
MalwarePhishing & BEC
Malware Autopropagável se Espalha Via WhatsApp, Alvo: Usuários Brasileiros
A TrendAI™ Research identificou uma campanha ativa se espalhando via WhatsApp através de um anexo de arquivo ZIP. Quando executado, o malware estabelece persistência e sequestra a conta do WhatsApp comprometida para enviar cópias de si mesmo para os contatos da vítima.
October 3rd, 2025 15 min read
Read Article
Ransomware & extortion
Novo LockBit 5.0 Alvo Windows, Linux, ESXi
A TrendAI™ Research analisou binários de origem da atividade mais recente do notório Ransomware LockBit com sua versão 5.0, que exibe técnicas avançadas de ofuscação, anti-análise e capacidades multiplataforma perfeitas para sistemas Windows, Linux e ESXi.
September 25th, 2025 7 min read
Read Article
AI-Powered App Exposes User Data, Creates Risk of Supply Chain Attacks
TrendAI™ Research’s analysis of Wondershare RepairIt reveals how the AI-driven app exposed sensitive user data due to unsecure cloud storage practices and hardcoded credentials, creating risks of model tampering and supply chain attacks.
September 23rd, 2025 8 min read
Read Article
How AI-Native Development Platforms Enable Fake Captcha Pages
Cybercriminals are abusing AI-native platforms like Vercel, Netlify, and Lovable to host fake captcha pages that deceive users, bypass detection, and drive phishing campaigns.
September 19th, 2025 4 min read
Read Article
Cyber crime
What We Know About the NPM Supply Chain Attack
TrendAI™ Research outlines the critical details behind the ongoing NPM supply chain attack and offers essential steps to stay protected against potential compromise.
September 18th, 2025 9 min read
Read Article
AI
Operadores do EvilAI Usam Código Gerado por IA e Aplicativos Falsos para Ataques de Grande Alcance
Combinando código gerado por IA e engenharia social, os operadores do EvilAI estão executando uma campanha em rápida expansão, disfarçando seu malware como aplicativos legítimos para contornar a segurança, roubar credenciais e comprometer persistentemente organizações em todo o mundo.
September 11th, 2025 18 min read
Read Article
Ransomware & extortion
Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed
An analysis of the Gentlemen ransomware group, which employs advanced, adaptive tactics, techniques, and procedure to target critical industries worldwide.
September 9th, 2025 12 min read
Read Article
MalwareSocial engineering
An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps
Trend™ Research analyzed a campaign distributing Atomic macOS Stealer (AMOS), a malware family targeting macOS users. Attackers disguise the malware as “cracked” versions of legitimate apps, luring users into installation.
September 4th, 2025 16 min read
Read Article
APTs
TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents
The TAOTH campaign exploited abandoned software and spear-phishing to deploy multiple malware families, targeting dissidents and other high-value individuals across Eastern Asia.
August 28th, 2025 10 min read
Read Article
Ransomware & extortion
Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware
Warlock ransomware exploits unpatched Microsoft SharePoint vulnerabilities to gain access, escalate privileges, steal credentials, move laterally, and deploy ransomware with data exfiltration across enterprise environments.
August 20th, 2025 14 min read
Read Article