Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
Exploits & Zero-Days
eMudhra 8 組 CA 私鑰遭破解：企業 TLS 憑證風險與 6 大應變措施

eMudhra 8 組中繼 CA 憑證私鑰遭破解，金鑰最短僅 3 位元。TrendAI™ 說明 SSL 憑證與程式碼簽章風險、受影響的 Chrome、Linux、Go、Node.js 等環境，以及企業資安團隊現在應採取的 6 項修補行動與威脅追蹤指標。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Exploits & Zero-Days
CISO 驚魂一週：PHP 重大漏洞、eMudhra 憑證金鑰外洩，以及董事會一定會問的五個問題

兩個 PHP 重大漏洞在修補程式釋出前遭外洩，同一天 Mozilla 揭露 eMudhra 憑證授權中心（CA）金鑰強度不足。趨勢科技TrendAI™ 全球資安長 Sundari Parekh 為資安領導者提供一套實務行動指南。

2026年10月21日
Sundari Parekh
Read article

搜尋部落格文章

Cyber crime
Texas Municipalities Hit by REvil/Sodinokibi Paid No Ransom, Over Half Resume Operations

Cybercriminals who held to ransom the files of 22 Texas local government units for a combined ransom amount of US$2.5 million did not get a single cent, according to Texas state officials.

September 10th, 2019 3 min read TrendAI™ Research
Read Article
‘Purple Fox’ Malware Can Rootkit and Abuse PowerShell

This new iteration of Purple Fox that we came across, delivered by Rig, has a few new tricks up its sleeve. It retains its rootkit component by abusing publicly available code. It also abuses PowerShell making it capable of fileless infection.

September 9th, 2019 6 min read Johnlery Triunfante, Earle Maui Earnshaw, Michael Jhon Ofiaza
Read Article
Cloud security
Container Security in Six Steps

The complexity of container infrastructure, if not properly accounted for, can pose serious security risks. To minimize risks when building in containers, we came up with six steps that developers can follow.

September 5th, 2019 4 min read TrendAI™ Research
Read Article
Cyber crimeDeepfakes
Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company

An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company.

September 5th, 2019 3 min read TrendAI™ Research
Read Article
Cloud security
The Path to Secure DevOps Initiatives: Bridging the Gap Between Security and DevOps

In a survey commissioned by Trend Micro, majority of the respondents shared their concern for the risks in implementing DevOps. Learn why consulting IT security teams in the initiatives can help bridge gaps between production and security.

August 16th, 2019 4 min read TrendAI™ Research
Read Article
Malware
Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times

The mobile platform is ubiquitous — enabling users to make online transactions, run their everyday lives, or even use it in the workplace. It’s no surprise that fraudsters and cybercriminals would want to cash in on it. Delivering adware, for example, enables them to monetize affected devices while attempting to be innocuous. And while they may be viewed as a nuisance at best, mobile ad fraud- and adware-related incidents became so rampant last year that it cost businesses hefty financial losses.

August 16th, 2019 5 min read Ecular Xu
Read Article
Ransomware & extortion
Report: Huge Increase in Ransomware Attacks on Businesses

According to a new report, ransomware attacks against businesses increased by 363% percent year-over-year. There has also been a greater number of ransomware attacks targeting different public sectors and local governments since the start of 2019.

August 12th, 2019 3 min read TrendAI™ Research
Read Article
Malicious Spam Campaign Uses ISO Image Files to Deliver LokiBot and NanoCore

A malicious spam campaign conducted in April used ISO image files to deliver the notorious LokiBot and NanoCore trojans.

June 28th, 2019 4 min read TrendAI™ Research
Read Article
Cloud securityDevops
Container Security: Examining Potential Threats to the Container Environment

The rise in adoption of containers means a greater need for security awareness. Our infographic details the various threats that container users could encounter at each stage of the development pipeline.

May 14th, 2019 6 min read TrendAI™ Research
Read Article
Cyber crimePhishing & BEC
What You Need To Know About Tax Scams

Tax season is upon us (again), and so are IRS tax scammers. How prepared are you when it comes to filing your taxes and defending against IRS tax fraud? Learn more about these scams and how you can protect yourself.

April 8th, 2019 8 min read TrendAI™ Research
Read Article