Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article

搜尋部落格文章

Cyber crime
Russian Group Cosmic Lynx Launches Over 200 BEC Campaigns

A Russian group dubbed as Cosmic Lynx initiated more than 200 BEC campaigns targeting hundreds of multinational companies.

July 9th, 2020 3 min read
Read Article
Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted

In this report, we discussed new ransomware family Avaddon, updates on techniques of other ransomware, and our latest figures.

July 8th, 2020 7 min read TrendAI™ Research
Read Article
Exploits & Zero-Days
Patch Now: F5 Vulnerability with CVSS 10 Severity Score

F5 Networks urges users to patch their BIG-IP networking systems ASAP, after the provider disclosed two vulnerabilities, namely CVE-2020-5902 and CVE-2020-5903.

July 7th, 2020 3 min read TrendAI™ Research
Read Article
Cyber crime
Malicious Chrome Extensions, Domains Used to Steal User Data

Browser extensions and malicious domains were used in a campaign that aims to track user activity and data.

July 3rd, 2020 3 min read TrendAI™ Research
Read Article
Cloud security
CSO Insights: Liggett Consulting’s Mark Liggett on Connectivity and Visibility in Securing Remote Work

Mark Liggett, CEO of Liggett Consulting and longtime IT and cybersecurity key player, sits down with Trend Micro to share his thoughts on the importance of taking into account connectivity and visibility in securing WFH setups.

July 1st, 2020 8 min read TrendAI™ Research
Read Article
Exploits & Zero-Days
Millions of IoT Devices Affected by Ripple20 Vulnerabilities

The internet of things (IoT) landscape will be critically affected by the recently discovered Ripple20 vulnerabilities. This group of 19 bugs could potentially hit millions of IoT devices across many different industries.

June 22nd, 2020 1 min read TrendAI™ Research
Read Article
Cyber crime
Updated Analysis on Nefilim Ransomware’s Behavior

Through investigation of recent cases, we have amassed more information on how Nefilim ransomware operates. Some notable updates are the use of other tools and the description of events that occur within the attack phases.

June 6th, 2020 6 min read TrendAI™ Research
Read Article
Cyber crime
Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails

We have come across a PowerShell script (mailer script) that distributes the Lemon Duck cryptominer through a new propagation method: Covid-19-themed emails with weaponized attachments.

June 3rd, 2020 4 min read TrendAI™ Research
Read Article
Cyber crime
No Entry: How Attackers Can Sneak Past Facial Recognition Devices

Access control devices that use facial recognition manage entry and exit into an enterprise’s premises. They are essentially the first line of defense for many businesses, but are they secure?

June 2nd, 2020 4 min read TrendAI™ Research
Read Article
Coinminers Exploit SaltStack Vulnerabilities CVE-2020-11651 and CVE-2020-11652

We analyzed the critical vulnerabilities affecting Salt, their patches, and some threats exploiting them.

May 27th, 2020 5 min read Govind Sarda, Suraj Sahu
Read Article