
TrendAI™
保安網誌

精選網誌

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
搜尋研究文章
Filter by:
Analysis of Kinsing Malware's Use of Rootkit
Several shell scripts accompany Kinsing. These shell scripts are responsible for downloading and installing, removing, and uninstalling various resource-intensive services and processes. This blog post focuses on the role of the rootkit component.
Navigating Gray Clouds: The Importance of Visibility in Cloud Security
The big move to the cloud has already happened for majority of enterprises and organizations who are invested in providing unhampered, future-proof services. But how can they prioritize visibility in a cloud-first world?
Malicious Actors Target Comm Apps such as Zoom, Slack, Discord
Communication apps have caught the eye of malicious actors who are always looking to integrate new techniques in their malicious activities.
COVID-19 Used in Malicious Campaigns
Threat actors take advantage of the spread of COVID-19 for malicious campaigns. Goods and services related to the virus also appear in underground marketplaces and cybercriminal forums.
Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader
Starting this year, Ryuk began using another dropper called BazarLoader (also known as BazarBackdoor), which is primarily distributed via phishing emails that contain either malicious attachments or links to websites that host malware.
Docker Content Trust: What It Is and How It Secures Container Images
Can your container image be trusted? Learn how Docker Content Trust (DCT) employs digital signatures for container image verification and manages trusted collections of content.
Cybercriminals Gamble With Victims' Livelihoods To Pass the Covid-19 Blues
Our underground monitoring revealed several ways how criminals have been entertaining themselves during isolation, with normal activities that offer cyber-crime-related prizes.
CSO Insights: DataBank’s Mark Houpt on Looking Beyond Securing Infrastructures in the New Normal
Mark Houpt, Chief Information Security Officer of DataBank, provides security insights that highlight challenges and learnings from both corporate and customer perspectives.
The Basics of Keeping Kubernetes Cluster Secure: Worker Nodes and Related Components
We outline security mitigations and settings that should be prioritized in a clustered environment. The second part of our security guide on Kubernetes clusters covers best practices related to worker nodes, the kubelet, pods, and audit logs.
Safe and Smart Connections: Securing IoT Networks for Remote Setups
We re-examine the role of networks in IoT security during this period of work-from-home arrangements and growing reliance on smart devices.