Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article

搜尋部落格文章

Botnets
Mirai Updates: New Variant Mukashi Targets NAS Devices, New Vulnerability Exploited in GPON Routers, UPX-Packed FBot

Notorious IoT malware Mirai has seen a recent increase in updates as a new variant emerges and a new vulnerability is targeted.

March 25th, 2020 3 min read TrendAI™ Research
Read Article
Exploits & Zero-Days
Microsoft Alerts Users About Critical Font-related Remote Code Execution Vulnerability in Windows

An RCE vulnerability affecting Windows have been discovered, with Microsoft rating its severity as critical.

March 24th, 2020 2 min read TrendAI™ Research
Read Article
Nefilim Ransomware Threatens to Expose Stolen Data

New ransomware variant Nefilim is distributed through exposed Remote Desktop Protocol (RDP) and threatens to release stolen data to the public.

March 23rd, 2020 2 min read TrendAI™ Research
Read Article
Ransomware & extortion
New Variant of Paradise Ransomware Spreads Through IQY Files

Paradise ransomware can now spread through Internet Query Files.

March 18th, 2020 2 min read TrendAI™ Research
Read Article
IoT & smart devicesOT & critical infrastructure
The IIoT Threat Landscape: Securing Connected Industries

As the use of IoT extends beyond the home and goes into the vast industrial landscape, the scale of threats likewise grows.

March 18th, 2020 6 min read TrendAI™ Research
Read Article
Cyber crime
New Ursnif Campaign Targets Users in Japan

Trend Micro researchers detected a new Ursnif campaign that targets Japan and spreads through malicious word document files.

March 17th, 2020 3 min read Monte de Jesus
Read Article
Cyber crime
Trickbot Spreads as DLL, Comes with Upgrades Targeting Windows 10

New variants of notorious banking trojan Trickbot was distributed via DLL and had features that focus on Windows 10.

March 13th, 2020 2 min read Angelo Deveraturda
Read Article
Cyber crime
Analysis: Abuse of .NET features for compiling malicious programs

While the .NET framework is originally intended to help software engineers, cybercriminals have found a way to abuse its features to compile and execute malware on the fly.

March 12th, 2020 5 min read Karen Victor, Matthew Fernandez
Read Article
Exploits & Zero-Days
WordPress GDPR Plugin Vulnerable to Cross-Site Scripting Attacks

A WordPress GDPR plugin for managing cookies exposed sites to a vulnerability that allowed privilege escalation.

March 11th, 2020 3 min read TrendAI™ Research
Read Article
Ransomware & extortion
Nemty Ransomware Spreads via Love Letter Emails

Nemty ransomware was spread through love letter emails, complete with romantic email subjects and nothing but a winky emoticon in the email body.

March 9th, 2020 2 min read TrendAI™ Research
Read Article