Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 октября 2026 г.6 min read
TrendAI™ Research
28 октября 2026 г.
6 min read
Read article
TrendAI™
Security Blog
Featured Blogs
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 октября 2026 г.
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 октября 2026 г.
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 октября 2026 г.
Read article
Search for research articles
Site search
Filter by:
Malware
Fake Banking App Found on Google Play Used in SMiShing
As users start to look for apps and other services from their banks, opportunities for scammers also increase. One recent example of this is the app Movil Secure, part of a SMiShing scheme targeting Spanish-speaking users.
November 7th, 2018 4 min read
Read Article
Exploits & Zero-Days
Virtual Patching: Patch Those Vulnerabilities before They Can Be Exploited
The average organization takes over 30 days to patch operating systems and software, and longer for more complex business applications and systems. This infographic shows how virtual patching solutions can help mitigate threats from vulnerabilities.
October 25th, 2018 4 min read
Read Article
Targeted attacks
LoJax UEFI Rootkit Used in Cyberespionage
Security researchers came across a Unified Extensible Firmware Interface (UEFI) rootkit in the wild being used for cyberespionage. Named LoJax, the rootkit is reportedly packaged with other tools that modifies the system’s firmware to infect it with malware.
October 1st, 2018 3 min read
Read Article
Cyber crime
.EGG Files in Spam Delivers GandCrab v4.3 Ransomware to South Korean Users
We discovered spam mails abusing EGG (.egg) files to deliver the GandCrab v4.3 ransomware. Additionally, the operators behind the spam mails appear to be specifically going after South Korean users, as evidenced by the use of Hangul in the spam mails.
August 20th, 2018 2 min read
Read Article
Exploits & Zero-Days
Over 200,000 MikroTik Routers Compromised in Cryptojacking Campaign
Security researchers uncovered a cryptojacking campaign that exploits a vulnerability in MikroTik routers to inject a malicious version of Coinhive. Here’s what you need to know.
August 3rd, 2018 3 min read
Read Article
Malware
Fileless Malware PowerGhost Targets Corporate Systems
A new fileless malware utilizes Powershell and EternalBlue via WMI for propagation, infecting workstations and servers connected to a local server with a cryptocurrency miner and a DDos tool. Significant infections have been detected in North America and Europ
July 30th, 2018 2 min read
Read Article
Phishing & BEC
FBI Report: Global BEC Losses Exceeded US$12 Billion in 2018
The Federal Bureau of Investigation (FBI) issued a public service announcement (PSA) regarding the continued increase of Business Email Compromise (BEC) scams, which total global losses have already reached over US$12 billion in 2018.
July 18th, 2018 2 min read
Read Article
Cloud security
Security by Design: A Checklist for Safeguarding Virtual Machines and Containers
Here are some considerations and best practices that developers, IT operations professionals, and system administrators should take into account in securing the infrastructures that power the applications they use.
May 22nd, 2018 5 min read
Read Article
FacexWorm Abuses Facebook Messenger for Propagation
Our Cyber Safety Solutions team identified a malicious Chrome extension we named FacexWorm, which uses a miscellany of techniques to target cryptocurrency trading platforms accessed on an affected browser and propagates via Facebook Messenger.
April 30th, 2018 6 min read
Read Article
Cyber crime
Curbing the BEC Problem Using AI and Machine Learning
Due to BEC’s evolving and treacherous nature, run-of-the-mill best practices and security solutions have become weak to withstand attacks. Find out how advanced solutions that utilize artificial intelligence and machine learning help in defending against BEC.
April 16th, 2018 5 min read
Read Article