Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日6 min read
TrendAI™ Research
2026年10月28日
6 min read
Read article
TrendAI™
資安部落格
熱門文章
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南
2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。
2026年10月22日
Read article
Exploits & Zero-Days
eMudhra 8 組 CA 私鑰遭破解：企業 TLS 憑證風險與 6 大應變措施
eMudhra 8 組中繼 CA 憑證私鑰遭破解，金鑰最短僅 3 位元。TrendAI™ 說明 SSL 憑證與程式碼簽章風險、受影響的 Chrome、Linux、Go、Node.js 等環境，以及企業資安團隊現在應採取的 6 項修補行動與威脅追蹤指標。
2026年10月21日
Read article
Exploits & Zero-Days
CISO 驚魂一週：PHP 重大漏洞、eMudhra 憑證金鑰外洩，以及董事會一定會問的五個問題
兩個 PHP 重大漏洞在修補程式釋出前遭外洩，同一天 Mozilla 揭露 eMudhra 憑證授權中心（CA）金鑰強度不足。趨勢科技TrendAI™ 全球資安長 Sundari Parekh 為資安領導者提供一套實務行動指南。
2026年10月21日
Read article
搜尋部落格文章
Site search
Filter by:
Cyber crime
Coinhive Miner Emerges as the 6th Most Common Malware
A new report reveals Coinhive's reach after it ranked the coin miner as the 6th most common malware in the world.
November 15th, 2017 2 min read
Read Article
IoT & smart devices
Best Practices: Securing Your Mobile Device
The number of mobile phone users around the world is projected to exceed the five billion mark by 2019. Since cybercriminals usually cast wide nets to reach more potential victims, mobile users should protect their devices early on to defend against threats.
October 10th, 2017 5 min read
Read Article
Best Practices: How to Secure Your Social Media Accounts
The leading social media platforms have billions of users, and the number keeps getting bigger every year. Learn how to keep your social media accounts secure.
October 4th, 2017 5 min read
Read Article
ZNIU: First Android Malware to Exploit Dirty COW
Dirty COW attacks on Android has been silent since its discovery but almost a year later, we captured samples of ZNIU—the first malware family to exploit the vulnerability on the Android platform.
September 25th, 2017 6 min read
Read Article
Cyber crimeMalware
Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores
A spate of new attacks targeting the Android operating system have been discovered using a banking trojan named Red Alert 2.0.
September 20th, 2017 2 min read
Read Article
Malware
Best Practices: Deploying an Effective Firewall
There is no panacea for building a hacker-proof firewall, but there are things that can be done to streamline its management. These best practices provide a starting point for managing your firewall—so you and your company don’t get burned.
September 14th, 2017 5 min read
Read Article
Cloud securityData privacy & regulation
Best Practices: Backing Up Data
In a data-driven world where information is often a company’s most valuable asset, protecting data is more important than it’s ever been.
September 7th, 2017 5 min read
Read Article
Cyber crime
Best Practices: Securing Sysadmin Tools
Legitimate tools used by IT/system administrators have become valuable cybercriminal targets because of the privilege they provide for greater network access. Here are some best practices for mitigating the abuse of sysadmin tools.
September 5th, 2017 4 min read
Read Article
Patching Problems and How to Solve Them
Can we fix the lag between patch releases and actual implementation? Current events reveal that patching should be made a definite priority. We provide a guide on how to manage patching for enterprises and large organizations.
August 30th, 2017 4 min read
Read Article
Software supply chain
Mobile App Security for Developers
The use of mobile apps is increasing especially among enterprises. More than ever, developers must work harder to improve the security of the apps they create. Here are some best practices.
August 29th, 2017 7 min read
Read Article