Exploits & Zero-Days
Node2Shell（CVE-2026-111497）重大漏洞解析：Brotli 漏洞影響哪些系統？企業該如何修補？
2026年10月28日6 min read
TrendAI™ Research
2026年10月28日
6 min read
Read article
TrendAI™
資安部落格
熱門文章
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南
2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。
2026年10月22日
Read article
Exploits & Zero-Days
eMudhra 8 組 CA 私鑰遭破解：企業 TLS 憑證風險與 6 大應變措施
eMudhra 8 組中繼 CA 憑證私鑰遭破解，金鑰最短僅 3 位元。TrendAI™ 說明 SSL 憑證與程式碼簽章風險、受影響的 Chrome、Linux、Go、Node.js 等環境，以及企業資安團隊現在應採取的 6 項修補行動與威脅追蹤指標。
2026年10月21日
Read article
Exploits & Zero-Days
CISO 驚魂一週：PHP 重大漏洞、eMudhra 憑證金鑰外洩，以及董事會一定會問的五個問題
兩個 PHP 重大漏洞在修補程式釋出前遭外洩，同一天 Mozilla 揭露 eMudhra 憑證授權中心（CA）金鑰強度不足。趨勢科技TrendAI™ 全球資安長 Sundari Parekh 為資安領導者提供一套實務行動指南。
2026年10月21日
Read article
搜尋部落格文章
Site search
Filter by:
Phishing & BEC
Security 101: Business Process Compromise
Past events show that attackers don't just target people, but processes as well. Enterprises should be aware of the of rising possibility of Business Process Compromises.
February 1st, 2017 6 min read
Read Article
Cyber crime
InfoSec Guide: Mitigating Email Threats
Email remains an important communication tool for business organizations. Unfortunately, its widespread use also makes it an ideal platform for cybercrime. Here are some tips for dealing with email-based threats.
January 30th, 2017 7 min read
Read Article
Cyber crime
A Rundown of the Biggest Cybersecurity Incidents of 2016
The most notable cybersecurity incidents of the past year, from the biggest data breaches and most expensive attacks to the most persistent attackers and impactful malware.
December 18th, 2016 17 min read
Read Article
Cyber crime
Yahoo Discloses 2013 Breach that Exposed Over One Billion Accounts
Yahoo disclosed yet another breach that exposed 1 billion user accounts in August 2013. This comes shortly after it announced a smaller but significant hack last September.
December 15th, 2016 3 min read
Read Article
500 Million Yahoo Users Affected by Data Breach – Password Change Recommended
Yahoo users are prompted to change passwords as a massive breach compromises 500 million accounts.
September 23rd, 2016 3 min read
Read Article
Enterprise Network Protection: Protecting Data through Network Segmentation
An enterprise guide on network segmentation; how it works to secure large enterprise networks, why it's needed, and examples of some of the most widely used network models for different industries.
September 14th, 2016 3 min read
Read Article
Ransomware as a Service (RaaS)
Ransomware-as-a-Service: Ransomware Operators Find Ways to Bring in Business
Cybercriminals are taking cues from legitimate enterprises and focusing on growing their operations. Different variations of ransomware-as-a-service show the evolving nature of the business.
September 2nd, 2016 6 min read
Read Article
Cyber crimeRansomware & extortion
Ransomware 101: What, How, and Why
This infographic shows how ransomware has evolved, how big the problem has become, and ways to avoid being a ransomware victim.
June 14th, 2016 3 min read
Read Article
Cyber crimePhishing & BEC
Billion-Dollar Scams: The Numbers Behind Business Email Compromise
Business Email Compromise schemes are one of the biggest threats to companies to date. One carefully crafted email sent to the right person can cost a company millions of dollars. How is it done and what makes it so effective?
June 9th, 2016 6 min read
Read Article
Malware
Marcher Android Banking Malware Now Targeting UK Customers
Developers of the Android-based banking trojan Marcher updated the malware, adding major banks in United Kingdom to its list of targets.
June 3rd, 2016 3 min read
Read Article