Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article

搜尋部落格文章

Cloud security
Undertaking Security Challenges in Hybrid Cloud Environments

As organizations make their move toward a more efficient and innovative future in the cloud, hybrid cloud environments pose several problems that can make or break their overall strategies.

April 14th, 2020 8 min read TrendAI™ Research
Read Article
Cyber crime
“Twin Flower” Campaign Jacks Up Network Traffic, Downloads Files, Steals Data

Researchers detected the “Twin Flower” campaign that simulates increased clicks to boost network traffic, boosting SEO ranking and advertising revenue.

April 13th, 2020 2 min read TrendAI™ Research
Read Article
Cyber crime
Threat Actors Deliver Courier-Themed Spam Campaign with Attached ACE Files

Trend Micro researchers detected a new courier service themed malicious spam campaign that uses ACE files as attachments.

April 8th, 2020 2 min read Miguel Ang
Read Article
Cloud security
Misconfigured Docker Daemon API Ports Attacked for Kinsing Malware Campaign

A campaign targeted misconfigured Docker Daemon API ports through Kinsing malware.

April 7th, 2020 3 min read TrendAI™ Research
Read Article
Cyber crime
Analysis: Suspicious “Very Hidden” Formula on Excel 4.0 Macro Sheet

Cybercriminals exploit a feature in Excel that allows users to hide sheets by hiding obfuscated suspicious formulas in a “Very Hidden” sheet.

April 6th, 2020 3 min read Mhica Angel Romero
Read Article
Cyber crime
Investigation into a Nefilim Attack Shows Signs of Lateral Movement, Possible Data Exfiltration

Trend Micro’s Managed XDR (MxDR) and Incident Response (IR) teams recently investigated an incident involving a company that was hit by the Nefilim ransomware.

April 3rd, 2020 5 min read Joelson Soares, Erika Mendoza, Jay Yaneza
Read Article
Phishing & BECCyber crime
Threat Actors Abuse Evernote, Other Shared Platforms for Credential Phishing

Threat actors use Evernote and other platforms such as Canva, Lucidpress, and Infogram as host pages for credential phishing.

April 1st, 2020 3 min read Marshall Chen, Yorkbing Yap
Read Article
Cyber crime
Malicious Domains and Files Related to Zoom Increase, ‘Zoom Bombing’ on the Rise

Users of video conferencing app Zoom have been targeted using suspicious domains, malicious files, and ‘Zoom bombing’ as threat actors take advantage of work-from-home arrangements brought about by COVID-19.

March 31st, 2020 2 min read TrendAI™ Research
Read Article
Cyber crime
Russian Investigators Bust Credit Card Fraud Ring

At least 25 people allegedly including a kingpin were arrested for card fraud by Russian federal investigators.

March 30th, 2020 2 min read TrendAI™ Research
Read Article
Working From Home? Here’s What You Need for a Secure Setup

There has been an influx of employees signing in remotely to corporate networks and using cloud-based applications. But this shift could also open doors to security risks. Where should security fit in?

March 26th, 2020 7 min read Martin Roesler
Read Article