TrendAI™
保安網誌

Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides

October 28th, 2026 6 min read TrendAI™ Research

Read Article

Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now

On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.

October 22nd, 2026 TrendAI™ Research

Read Article

Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now

Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.

October 21st, 2026 TrendAI™ Research

Read Article

What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask

Two critical PHP flaws leaked before patches shipped, and the same day Mozilla disclosed weak eMudhra certificate authority keys. In this post, TrendAI™ Global CISO Sundari Parekh gives security leaders a practical playbook.

October 21st, 2026

Sundari Parekh

Read Article

Earth Sirrush: A Russia-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling

Earth Sirrush has repeatedly changed its tools and delivery methods, but TrendAI™ Research reveals how shared code, reused artifacts, and infrastructure patterns continue to expose the links between its campaigns.

October 5th, 2026 5 min read Hiroyuki Kakara, Feike Hacquebord

Read Article

AI and the Evolving Threat Landscape: What Public Sector CISOs Need to Know Now

Public sector CISOs need to grapple with challenges brought about by AI threats: up to 3,600 AI CVEs in 2026, autonomous ransomware, and critical infrastructure risk.

October 5th, 2026 Jon Clay, VP of Threat Intelligence, TrendAI™

Read Article

Assess Your AI Security Maturity Through Visibility, Observability, Ownership, and Governance

Three questions can help reveal your AI security maturity. Hear expert perspectives and explore the pathway to governance in a series of short video conversations.

October 2nd, 2026 Truman Coburn

Read Article

ShinyHunters Returns to PeopleSoft With a One-Character WAF Bypass

ShinyHunters is once again exploiting a previously patched vulnerability in PeopleSoft, which we analyzed in June 2026.

October 1st, 2026 TrendAI™ Research

Read Article

Beyond Model Alignment: Securing Every Layer of the AI Agent

Alignment makes a model well-intentioned, but it can’t secure the harness, tools, and data an agent touches in production. Real agent security means governing every layer with enforcement the agent itself can’t switch off.

September 28th, 2026 3 min read Rachel Jin

Read Article

When Trust in AI Becomes an Attack Surface: Analyzing Prompt Injection, Model Theft, and Pipeline Poisoning

Our analysis shows how AI attacks are moving beyond malicious prompts into the tools, models, and pipelines organizations already trust, and the controls organizations can put in place to reduce their exposure.

September 24th, 2026 Vladimir Kropotov, Myla Pilao

Read Article