Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article

搜尋部落格文章

Cyber crime
Addressing Threats Like Ryuk via Trend Micro XDR

Our infographic shows how Trend Micro XDR is designed to combat threats like Ryuk using machine learning and analytics to correlate various events across multiple layers.

September 24th, 2020 5 min read TrendAI™ Research
Read Article
Cyber crimeMalware
Mispadu Banking Trojan Resurfaces

Recent spam campaigns leading to URSA/Mispadu has been uncovered. This attack targets systems with Spanish and Portuguese as system languages.

September 22nd, 2020 3 min read TrendAI™ Research
Read Article
Cloud security
CSO Insights: Ricoh USA’s David Levine on Employing a Cloud- and Cybersecurity-First Strategy

David Levine, Vice President of Corporate and Information Security and CSO for Ricoh USA, Inc., shares his thoughts on reinforcing a security mindset in the organization and how a cloud-first strategy helps enable their operations in the "new normal"

August 26th, 2020 7 min read TrendAI™ Research
Read Article
Malicious Docker Hub Container Images Used for Cryptocurrency Mining

In our monitoring of Docker-related threats, we came across a threat actor who uploaded malicious images to Docker Hub for cryptocurrency mining.

August 19th, 2020 3 min read Augusto Remillano II
Read Article
Cyber crime
Threat Recap: Darkside, Crysis, Negasteal, Coinminer

Darkside ransomware surfaced, operators behind Crysis/Dharma released a hacking toolkit, a targeted email campaign was used to propagate Negasteal, and a coinminer was seen bundled with legitimate applications.

August 19th, 2020 4 min read Miguel Ang, Raphael Centeno, Don Ovid Ladores, Llallum Victoria…
Read Article
Cyber crime
Influential Facebook Brand Pages Stolen via Credential Phishing

We found some fake Facebook accounts stolen from influential accounts to sell, change the details, and/or reused for phishing.

August 17th, 2020 7 min read Alice Wu
Read Article
Exploits & Zero-Days
Patch List: Adobe, Citrix, Intel, and vBulletin Vulns

We rounded up information on recently published patches for Adobe, Citrix, Intel, and vBulletin.

August 14th, 2020 4 min read
Read Article
XCSSET Mac Malware: Infects Xcode Projects, Uses 0Days

Further investigation led us to a developer’s Xcode project that contained XCSSET source malware, which leads to a rabbit hole of malicious payloads. Most notable in our investigation is the discovery of two zero-day exploits.

August 13th, 2020 3 min read Mac Threat Response, Mobile Research Team
Read Article
Cyber crime
Online Dating Websites Lure Japanese Customers to Scams

We found online dating website scam campaigns primarily targeting Japanese customers for their personal and financial information.

July 30th, 2020 4 min read Alex Y. Chen
Read Article
Cloud security
Application Security 101

Security issues often arise as a result of applications being rushed for deployment without adequate checks and protections. What are the top security risks to applications and what can organizations do to secure their DevOps pipeline?

July 27th, 2020 11 min read TrendAI™ Research
Read Article