
TrendAI™
Blog de Segurança

Blogs em Destaque

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
Pesquisar por artigos de pesquisa
Filter by:
3 Indonesian Hackers Arrested for Global Magecart Attacks, Other Members Still at Large
The Interpol, together with the Indonesian National Police, announced the arrest of three Indonesian men suspected of being behind Magecart attacks.
Google, Mozilla Crack Down on Malicious Extensions and Add-ons
Google indefinitely suspends extensions that use the Chrome Web Store payments while Mozilla bans 197 add-ons in a quest to halt fraudulent activities.
Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers
An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII).
NetWire RAT Hidden in IMG Files Deployed in BEC Campaign
A recent BEC campaign targets organizations by sending them emails with IMG (disk imaging) file attachments hiding a NetWire remote access trojan.
Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment
A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras.
Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices
A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices.
Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided
On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.
Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601
Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).
Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts
An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries.
Texas School District Loses $2.3 Million to Phishing Scam, BEC
A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million.