Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article

搜尋部落格文章

Analysis of Kinsing Malware's Use of Rootkit

Several shell scripts accompany Kinsing. These shell scripts are responsible for downloading and installing, removing, and uninstalling various resource-intensive services and processes. This blog post focuses on the role of the rootkit component.

November 24th, 2020 4 min read David Fiser
Read Article
Cloud security
Navigating Gray Clouds: The Importance of Visibility in Cloud Security

The big move to the cloud has already happened for majority of enterprises and organizations who are invested in providing unhampered, future-proof services. But how can they prioritize visibility in a cloud-first world?

November 23rd, 2020 9 min read TrendAI™ Research
Read Article
Ransomware & extortion
Malicious Actors Target Comm Apps such as Zoom, Slack, Discord

Communication apps have caught the eye of malicious actors who are always looking to integrate new techniques in their malicious activities.

November 16th, 2020 6 min read TrendAI™ Research
Read Article
Cyber crime
COVID-19 Used in Malicious Campaigns

Threat actors take advantage of the spread of COVID-19 for malicious campaigns. Goods and services related to the virus also appear in underground marketplaces and cybercriminal forums.

November 11th, 2020 23 min read TrendAI™ Research
Read Article
Ransomware & extortion
Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader

Starting this year, Ryuk began using another dropper called BazarLoader (also known as BazarBackdoor), which is primarily distributed via phishing emails that contain either malicious attachments or links to websites that host malware.

November 4th, 2020 4 min read TrendAI™ Research
Read Article
Cloud security
Docker Content Trust: What It Is and How It Secures Container Images

Can your container image be trusted? Learn how Docker Content Trust (DCT) employs digital signatures for container image verification and manages trusted collections of content.

October 14th, 2020 7 min read Brandon Niemczyk
Read Article
Cybercriminal underground
Cybercriminals Gamble With Victims' Livelihoods To Pass the Covid-19 Blues

Our underground monitoring revealed several ways how criminals have been entertaining themselves during isolation, with normal activities that offer cyber-crime-related prizes.

October 12th, 2020 7 min read Erin Johnson, Vladimir Kropotov, Fyodor Yarochkin
Read Article
Cloud security
CSO Insights: DataBank’s Mark Houpt on Looking Beyond Securing Infrastructures in the New Normal

Mark Houpt, Chief Information Security Officer of DataBank, provides security insights that highlight challenges and learnings from both corporate and customer perspectives.

October 8th, 2020 13 min read TrendAI™ Research
Read Article
Cloud security
The Basics of Keeping Kubernetes Cluster Secure: Worker Nodes and Related Components

We outline security mitigations and settings that should be prioritized in a clustered environment. The second part of our security guide on Kubernetes clusters covers best practices related to worker nodes, the kubelet, pods, and audit logs.

October 8th, 2020 11 min read Magno Logan
Read Article
IoT & smart devices
Safe and Smart Connections: Securing IoT Networks for Remote Setups

We re-examine the role of networks in IoT security during this period of work-from-home arrangements and growing reliance on smart devices.

October 7th, 2020 8 min read TrendAI™ Research
Read Article