Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article

搜尋部落格文章

Cyber crime
Group Behind TrickBot Spreads Fileless BazarBackdoor

A campaign propagates a new malware named ‘BazarBackdoor’, a fileless backdoor reportedly created by the same threat actors behind TrickBot.

April 27th, 2020 3 min read TrendAI™ Research
Read Article
Cloud securityDevops
Guidance on Kubernetes Threat Modeling

We provide recommendations for cloud admins on how to formulate a security strategy when using Kubernetes for container orchestration.

April 27th, 2020 7 min read Brandon Niemczyk
Read Article
Cyber crime
Know the Symptoms: Protect Your Devices While Working From Home

Is your work-from-home set up secure? Here are a few signs to know if your devices have been hacked or infected with malware.

April 22nd, 2020 5 min read TrendAI™ Research
Read Article
Cyber crime
Loki Delivered as CAB File Attachment

A variant of Loki info stealer that we detected through our honeypot is propagated as Windows CAB file email attachments. It uses process hollowing to evade detection.

April 22nd, 2020 2 min read Miguel Ang
Read Article
Phishing & BEC
Australian Health Insurance-Themed Spam Spreads Ursnif

A spam campaign that spreads the Ursnif spyware has attachments named after an Australian insurance provider.

April 21st, 2020 2 min read Monte de Jesus
Read Article
Malware
Exposed Redis Instances Abused for Remote Code Execution, Cryptocurrency Mining

Recently, we wrote an article about more than 8,000 unsecured Redis instances found in the cloud. In this article, we expound on how these instances can be abused to perform remote code execution (RCE), as demonstrated by malware samples captured in the wild.

April 21st, 2020 12 min read David Fiser
Read Article
Cyber crime
Maze Ransomware Attacks US IT Firm

Maze ransomware, notorious for not just encrypting but for stealing victims’ data, attacks a US IT firm. The company sent emails to customers which include IP addresses and file hashes that have been linked to previous Maze attacks.

April 20th, 2020 2 min read TrendAI™ Research
Read Article
Ransomware & extortion
Nemty Ransomware Ceases Public Operations, Focuses on Private Schemes

Cybercriminals behind Nemty ransomware close down their Ransomware-as-a-Service (RaaS) operation as they zero in on private schemes. This is confirmed through a post in a Russian hacker forum.

April 17th, 2020 2 min read TrendAI™ Research
Read Article
Social engineering
Fake Messaging App Installers Promoted on Fraudulent Download Sites, Target Russian Users

Fake installers of popular messaging apps such as Viber and WhatsApp are propagated via fraudulent Russian websites. The installers are believed to be adware.

April 16th, 2020 2 min read Raphael Centeno
Read Article
Cloud security
How to Secure Video Conferencing Apps

Video conferencing apps provide many benefits, but they also present organizations with the challenge of ensuring that their employees — and the data they work with — remain secure when using these apps.

April 15th, 2020 5 min read TrendAI™ Research
Read Article