兩大 PHP 重大高風險漏洞修補前遭外洩 企業與 IT 團隊當前應對指南
In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to businesses on October 9, and the chair of the ruling party’s cybersecurity headquarters described cyberspace as being in a “state of emergency.”
The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.
TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.
Ransomware has evolved from an encryption-driven attack into one monetization path within a modular criminal economy, where access to victim environments, not the ransomware payload, is now the core commodity.
In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to businesses on October 9, and the chair of the ruling party’s cybersecurity headquarters described cyberspace as being in a “state of emergency.”
The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.
TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.
Ransomware has evolved from an encryption-driven attack into one monetization path within a modular criminal economy, where access to victim environments, not the ransomware payload, is now the core commodity.
TrendAI™ Research analyzed the activities of SHADOW-EARTH-79, an entity abusing the real-time ad-tech bidding process to track and profile individuals in conflict zones, sanctioned states, and other sensitive locations worldwide.
Digital assistants are becoming trusted, capable intermediaries, which inadvertently makes them a powerful new vector for social engineering. This article examines how attackers could exploit an assistant’s knowledge, influence, and ability to act on a user’s behalf.
TrendAI™ Research examines the unique dynamics and factors that influence the adoption of AI in state-aligned APT activity. The report looks into four countries (China, Russia, North Korea, and Iran) to understand why their state-aligned actors adopt AI in the ways that they do.
We developed Scarecrow, a tool that hides refusal instructions in documents so AI agents ingesting them are prompted to stop processing. Our findings show that this same technique can help defenders disrupt AI-driven access to sensitive documents.
Generative AI now writes clinical notes, drafts patient replies, and decides claims, often faster than healthcare’s oversight can keep pace. TrendAI™ Research maps the resulting “custody gap” and the risk it creates, from the exam room to the back office, where AI-generated artifacts can enter patient records.
本文介紹企業在導入和使用 AI 代理時所應考量的資安與治理議題，我們列出了 AI 代理特有的風險結構，並提出一套資安框架以及一套技術性與組織性控管方法來支援 AI 導入。
2026年10月27日
20 min read