
TrendAI™
資安部落格

熱門文章

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
Node2Shell(CVE-2026-111497)重大漏洞解析:Brotli 漏洞影響哪些系統?企業該如何修補?
兩大 PHP重大高風險漏洞 CVE-2026-109618/109619 修補前遭外洩:企業與 IT 團隊當前應對指南
2026 年 10 月 20 日,兩個可導致遠端程式碼執行(RCE)的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除,但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞(CVE-2026-109618 與 CVE-2026-109619)的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。
搜尋部落格文章
Filter by:
Securing the 4 Cs of Cloud-Native Systems: Cloud, Cluster, Container, and Code
Cloud-native security adopts the defense-in-depth approach and divides the security strategies utilized in cloud-native systems into four different layers: cloud, container, cluster, code.
Qakbot Resurges, Spreads through VBS Files
We have seen events that point to the resurgence of Qakbot, a multi-component, information-stealing threat first discovered in 2007.
CSO Insights: SBV’s Ian Keller on the Challenges and Opportunities of Working Remotely
Ian Keller, Chief Security Officer of SBV Services in South Africa, recently sat down with Trend Micro and shared his thoughts on how his organization is coping with the current pandemic.
Phishing Site Uses Netflix as Lure, Employs Geolocation
A phishing site was found using a spoofed Netflix page to harvest account information, credit card credentials, and other PII.
Cloud Security: Key Concepts, Threats, and Solutions
When it comes to cloud computing security, or simply, cloud security, what are the builders’ responsibilities? How can developers and administrators ensure cloud security? This primer discusses the key concepts of cloud security and which areas need to be protected using flexible and comprehensive security solutions.
Coinminer, DDoS Bot Attack Docker Daemon Ports
A malicious cryptocurrency miner and Distributed Denial of Service (DDoS) bot that targets open Docker daemon ports.
Excel Files with Hidden Sheets Target Users in Italy
A spam campaign using emails that have Excel file (.xls) attachments has been seen circulating and targeting users in Italy.
Phishing, Other Threats Target Email and Video App Users
Cybercriminals are using credential phishing sites to trick users into entering their credentials into fake login pages of email and collaboration platforms and videoconferencing apps.
Security 101: How Fileless Attacks Work and Persist in Systems
Many attackers are switching from file-based malware to memory-based attacks to improve their stealth. “Fileless,” “zero-footprint,” or “living off the land” threats use legitimate applications to carry out malicious activities.
Loki Info Stealer Propagates through LZH Files
We recently acquired a spam sample that propagates the Loki infostealer through LZH compressed archive files.