Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年10月30日 15 min
Fyodor Yarochkin, Vladimir Kropotov
Read article
Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article

搜尋部落格文章

Cyber crime
3 Indonesian Hackers Arrested for Global Magecart Attacks, Other Members Still at Large

The Interpol, together with the Indonesian National Police, announced the arrest of three Indonesian men suspected of being behind Magecart attacks.

January 29th, 2020 3 min read TrendAI™ Research
Read Article
Cyber crime
Google, Mozilla Crack Down on Malicious Extensions and Add-ons

Google indefinitely suspends extensions that use the Chrome Web Store payments while Mozilla bans 197 add-ons in a quest to halt fraudulent activities.

January 28th, 2020 4 min read TrendAI™ Research
Read Article
Software supply chain
Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers

An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII).

January 27th, 2020 3 min read TrendAI™ Research
Read Article
Phishing & BEC
NetWire RAT Hidden in IMG Files Deployed in BEC Campaign

A recent BEC campaign targets organizations by sending them emails with IMG (disk imaging) file attachments hiding a NetWire remote access trojan.

January 23rd, 2020 2 min read
Read Article
Cyber crime
Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment

A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras.

January 22nd, 2020 3 min read TrendAI™ Research
Read Article
IoT & smart devices
Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices

A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices.

January 21st, 2020 3 min read TrendAI™ Research
Read Article
Exploits & Zero-Days
Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided

On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.

January 20th, 2020 3 min read TrendAI™ Research
Read Article
Exploits & Zero-Days
Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601

Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).

January 17th, 2020 2 min read TrendAI™ Research
Read Article
Cyber crimeMalware
Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts

An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries.

January 16th, 2020 2 min read TrendAI™ Research
Read Article
Phishing & BEC
Texas School District Loses $2.3 Million to Phishing Scam, BEC

A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million.

January 15th, 2020 2 min read TrendAI™ Research
Read Article