Skip to main content

TrendAI™
Blog de Segurança

Blog de Segurança TrendAI

Blogs em Destaque

Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now

On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.

22 de outubro de 2026
TrendAI™ Research
Read article
Two people talking in front of the workstation
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now

Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.

21 de outubro de 2026
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask

Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.

21 de outubro de 2026
Sundari Parekh
Read article

Pesquisar por artigos de pesquisa

AIEmerging technologies
The Architecture Behind $1B: How Customers Run TrendAI Vision One™ on AWS, and Secure Their AI Workloads
August 23rd, 2026 TrendAI™ Research
Read Article
Cyber threats
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant

TrendAI™ Research provides a comprehensive analysis of the RedC2 Linux Implant, a sophisticated threat recently discovered in the npm open-source ecosystem. 

August 20th, 2026 Aliakbar Zahravi
Read Article
Malware
Living Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains

In this blog entry, researchers at TrendAI Vision One™ Services – Managed Detection and Response (MDR) walk through how attackers deliver, install, and operate a reconfigured ScreenConnect client, and why it slips past defenses built to catch conventional malware.

August 17th, 2026 15 min read Buddy Tancio, Allixon Kristoffer Francisco, Fe Cureg, Aira Marcelo…
Read Article
Phishing & BEC
How AiTM Phishing Bypassed MFA to Hijack a Microsoft 365 Mailbox in BEC Scheme

One click on a targeted lure handed an attacker live Microsoft 365 session tokens, enough to impersonate a vendor and reroute payments. TrendAI Vision One™ Services – Managed Detection and Response (MDR) tracks the attack to its root cause.

August 14th, 2026 20 min read Jovit Samaniego
Read Article
AIExploits & Zero-Days
A velocidade da IA está mudando o cenário de vulnerabilidades. Nosso compromisso com o CISA KEV não está.

O TrendAI™ está aprofundando seu foco no Catálogo CISA KEV como um sinal comprovado de risco ativo. Com IA, o TrendAI™ combina a pesquisa ZDI do TrendAI™, inteligência de exploração, contexto de exposição e risco de negócios para impulsionar a priorização contínua assistida por IA, ajudando as equipes de segurança a tomarem melhores decisões e agirem mais rapidamente.

August 6th, 2026 5 min read Rachel Jin
Read Article
Exploits & Zero-Days
How TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow

TrendAI™ Research uncovered an open redirect in Dify's post-login flow that could have handed a freshly authenticated session, token and all, to an attacker, and worked with the vendor to close it across every sign-in path before the details went public.

August 4th, 2026 David Fiser, Alfredo Oliveira
Read Article
Cyber crime
TrendAI™ Intelligence Aids Law Enforcement Arrest of Tycoon 2FA Operators

The Singapore Police Force (SPF), working closely with Pakistan's National Cyber Crime Investigation Agency (NCCIA) and INTERPOL has arrested two individuals linked to Tycoon2FA, a phishing operation that served criminal customers across four continents.

August 4th, 2026 Christopher Boyton, Stephen Hilt
Read Article
OT & critical infrastructureMFA & authentication
Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know

Disruption reported across at least seven states, from equipment left accessible online. The issue is largely a matter of configuration and access control, and here's what to fix first.

August 3rd, 2026 5 min read TrendAI™ Research
Read Article
AI
Por que a Open Secure AI Alliance é Importante: Modelos de Fronteira Abertos, Flexibilidade de Implantação Aberta

TrendAI se junta à Nvidia como parceiro inaugural na Open Secure AI Alliance, avançando em modelos abertos, ferramentas e pesquisas para fortalecer a defesa cibernética.

July 30th, 2026 Rachel Jin
Read Article
AICyber threats
Dentro do Incidente OpenAI – Hugging Face: A Violação de IA Sem Atacante Humano Por Trás

Os próprios modelos da OpenAI saíram de um ambiente de teste e invadiram os servidores da Hugging Face para resolver uma avaliação, sem a participação de um atacante humano. O incidente mostrou que manter a segurança da IA agente agora depende de como ela é contida, não apenas de como é treinada.

July 23rd, 2026 8 min read Bestin Koruthu, David Girard
Read Article