Skip to main content

補丁前出現兩個關鍵的 PHP 漏洞:機構現在應該怎樣做。

TrendAI™ 深入研究

火花

Featured Articles

Cyber crime
Metaworse? The Trouble with the Metaverse

Innovators are diving into a new and immersive virtual space, but with new technology comes new threats. We bring forward possible problematic issues that metaverse pioneers should be wary of.

Read Article
Ransomware & extortionPhishing & BEC
Ransomware Spotlight: BlackByte

BlackByte is a ransomware group that has been building a name for itself since 2021. Like its contemporaries, it has gone after critical infrastructure for a higher chance of getting a payout. What techniques sets it apart?

Read Article
Cryptocurrency
The Crypto-Monetized Web: A Forward-Looking Thought Experiment

In past decades, we have seen how the web has drastically evolved. From the static, read-only version of Web 1.0, we have witnessed its transformation to its present mode — as the dynamic, interactive, and content creator-driven iteration that is Web 2.0.

Read Article
Cloud security
An Analysis of Azure Managed Identities Within Serverless Environments

We examine Azure’s Managed Identities service and its security capability in a threat model as developers’ go-to feature for managing secrets and credentials.

Read Article
Cyber crimeAPTs
Exposing Earth Berberoka: A Multiplatform APT Campaign Targeting Online Gambling Sites

Our research uncovers the tools and techniques used by Earth Berberoka across different platforms to target online gambling sites.

Read Article
Ransomware & extortionBy The Numbers
LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

This report delves into the ransomware threat landscape of the first quarter of 2022, with a focus on the three most successful ransomware families and the types of industries and organizations that were affected by their attacks.

Read Article
Ransomware & extortion
Ransomware Spotlight: RansomEXX

RansomEXX is a ransomware variant that gained notoriety after a spate of attacks in 2020 and continues to be active today. With its targeted nature and history for choosing high-profile victims, we shine our spotlight on RansomEXX to reveal its tactics, techniques, and procedures.

Read Article
Cloud securityMisconfigurations
Crafting an Azure App Services Threat Model

We looked into Azure App Services and created a threat model to mitigate the impact of threats on the infrastructure and applications.

Read Article
Cloud security
How Cybercriminals Abuse Cloud Tunneling Services

Our research examines how cloud tunneling services work and how organizations can thwart threats that abuse them.

Read Article
Cyber crimeExploits & Zero-Days
Analyzing the Data Distribution Service (DDS) Protocol for Critical Industries

The Data Distribution Service (DDS) standard drives thousands of systems every day as a middleware component for machine-to-machine communication with real-time requirements.

Read Article