Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 Ekim 20266 min read
TrendAI™ Research
28 Ekim 2026
6 min read
Read article
TrendAI™
Güvenlik Blogu
Öne Çıkan Blog Yazıları
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
22 Ekim 2026
Read article
Exploits & Zero-Days
Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now
Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.
21 Ekim 2026
Read article
Exploits & Zero-Days
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.
21 Ekim 2026
Read article
Araştırma makaleleri arayın
Site search
Filter by:
Cyber crime
Texas Municipalities Hit by REvil/Sodinokibi Paid No Ransom, Over Half Resume Operations
Cybercriminals who held to ransom the files of 22 Texas local government units for a combined ransom amount of US$2.5 million did not get a single cent, according to Texas state officials.
September 10th, 2019 3 min read
Read Article
‘Purple Fox’ Malware Can Rootkit and Abuse PowerShell
This new iteration of Purple Fox that we came across, delivered by Rig, has a few new tricks up its sleeve. It retains its rootkit component by abusing publicly available code. It also abuses PowerShell making it capable of fileless infection.
September 9th, 2019 6 min read
Read Article
Cloud security
Container Security in Six Steps
The complexity of container infrastructure, if not properly accounted for, can pose serious security risks. To minimize risks when building in containers, we came up with six steps that developers can follow.
September 5th, 2019 4 min read
Read Article
Cyber crimeDeepfakes
Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company
An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company.
September 5th, 2019 3 min read
Read Article
Cloud security
The Path to Secure DevOps Initiatives: Bridging the Gap Between Security and DevOps
In a survey commissioned by Trend Micro, majority of the respondents shared their concern for the risks in implementing DevOps. Learn why consulting IT security teams in the initiatives can help bridge gaps between production and security.
August 16th, 2019 4 min read
Read Article
Malware
Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times
The mobile platform is ubiquitous — enabling users to make online transactions, run their everyday lives, or even use it in the workplace. It’s no surprise that fraudsters and cybercriminals would want to cash in on it. Delivering adware, for example, enables them to monetize affected devices while attempting to be innocuous. And while they may be viewed as a nuisance at best, mobile ad fraud- and adware-related incidents became so rampant last year that it cost businesses hefty financial losses.
August 16th, 2019 5 min read
Read Article
Ransomware & extortion
Report: Huge Increase in Ransomware Attacks on Businesses
According to a new report, ransomware attacks against businesses increased by 363% percent year-over-year. There has also been a greater number of ransomware attacks targeting different public sectors and local governments since the start of 2019.
August 12th, 2019 3 min read
Read Article
Malicious Spam Campaign Uses ISO Image Files to Deliver LokiBot and NanoCore
A malicious spam campaign conducted in April used ISO image files to deliver the notorious LokiBot and NanoCore trojans.
June 28th, 2019 4 min read
Read Article
Cloud securityDevops
Container Security: Examining Potential Threats to the Container Environment
The rise in adoption of containers means a greater need for security awareness. Our infographic details the various threats that container users could encounter at each stage of the development pipeline.
May 14th, 2019 6 min read
Read Article
Cyber crimePhishing & BEC
What You Need To Know About Tax Scams
Tax season is upon us (again), and so are IRS tax scammers. How prepared are you when it comes to filing your taxes and defending against IRS tax fraud? Learn more about these scams and how you can protect yourself.
April 8th, 2019 8 min read
Read Article