Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
Exploits & Zero-Days
eMudhra 8 組 CA 私鑰遭破解：企業 TLS 憑證風險與 6 大應變措施

eMudhra 8 組中繼 CA 憑證私鑰遭破解，金鑰最短僅 3 位元。TrendAI™ 說明 SSL 憑證與程式碼簽章風險、受影響的 Chrome、Linux、Go、Node.js 等環境，以及企業資安團隊現在應採取的 6 項修補行動與威脅追蹤指標。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Exploits & Zero-Days
CISO 驚魂一週：PHP 重大漏洞、eMudhra 憑證金鑰外洩，以及董事會一定會問的五個問題

兩個 PHP 重大漏洞在修補程式釋出前遭外洩，同一天 Mozilla 揭露 eMudhra 憑證授權中心（CA）金鑰強度不足。趨勢科技TrendAI™ 全球資安長 Sundari Parekh 為資安領導者提供一套實務行動指南。

2026年10月21日
Sundari Parekh
Read article

搜尋部落格文章

Cyber crime
Malware Using Exploits from Shadow Brokers Leak Reportedly in the Wild

Exploits found in the trove of malware recently leaked by hacking group Shadow Brokers are reportedly being used to install ransomware and backdoor. Are your systems protected?

April 26th, 2017 6 min read TrendAI™ Research
Read Article
Ransomware & extortion
Ransomware Recap: Expanding Distribution Methods

This week's recap highlights new distribution methods that make ransomware more unpredictable in terms of how they infect their victims.

April 25th, 2017 4 min read TrendAI™ Research
Read Article
APTsCyber espionage
Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

April 25th, 2017 4 min read Feike Hacquebord
Read Article
IoT & smart devices
BrickerBot Malware Emerges, Permanently Bricks IoT Devices

A recently uncovered malware Brickerbot is making the rounds with the capability to permanently brick Internet of Things (IoT) devices. How can it be mitigated?

April 19th, 2017 4 min read TrendAI™ Research
Read Article
Exploits & Zero-Days
Shadow Brokers Leaks Hacking Tools: What it Means for Enterprises

Hacking group Shadow Brokers recently leaked a new trove of information-stealing tools and exploits targeting Windows systems and servers. What does this mean for enterprises?

April 18th, 2017 5 min read TrendAI™ Research
Read Article
IoT & smart devices
Infosec Guide: Dealing with Threats to a Bring Your Own Device (BYOD) Environment

This Infosec Guide will tackle the primary threats organizations face when implementing BYOD programs, as well as best practices and solutions to mitigate these threats.

April 17th, 2017 7 min read TrendAI™ Research
Read Article
Targeted attacks
Operation Cloud Hopper: What You Need to Know

A global cyberespionage campaign has been uncovered compromising managed IT service providers, using them as in-betweens to attack their targets. Here’s what you need to know.

April 10th, 2017 4 min read TrendAI™ Research
Read Article
Exploits & Zero-Days
Apache Struts 2 Vulnerability Leads to RCE

We looked into past several Remote Code Execution (RCE) vulnerabilities reported in Apache Struts, and observed that in most of them, attackers have used Object Graph Navigation Language (OGNL) expressions.

March 9th, 2017 3 min read Suraj Sahu
Read Article
Malware
The Michelangelo Virus, 25 Years Later

The Michelangelo virus scare remains a significant turning point for computer security, 25 years after its supposed major impact,

March 6th, 2017 3 min read TrendAI™ Research
Read Article
Phishing & BEC
Best Practices: Identifying and Mitigating Phishing Attacks

Despite being one of the oldest scams on the internet, phishing continues to be a significant problem for both individuals and organizations. Here are some methods to identify and deal with potential phishing attempts.

February 10th, 2017 7 min read TrendAI™ Research
Read Article