Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
Exploits & Zero-Days
eMudhra 8 組 CA 私鑰遭破解：企業 TLS 憑證風險與 6 大應變措施

eMudhra 8 組中繼 CA 憑證私鑰遭破解，金鑰最短僅 3 位元。TrendAI™ 說明 SSL 憑證與程式碼簽章風險、受影響的 Chrome、Linux、Go、Node.js 等環境，以及企業資安團隊現在應採取的 6 項修補行動與威脅追蹤指標。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Exploits & Zero-Days
CISO 驚魂一週：PHP 重大漏洞、eMudhra 憑證金鑰外洩，以及董事會一定會問的五個問題

兩個 PHP 重大漏洞在修補程式釋出前遭外洩，同一天 Mozilla 揭露 eMudhra 憑證授權中心（CA）金鑰強度不足。趨勢科技TrendAI™ 全球資安長 Sundari Parekh 為資安領導者提供一套實務行動指南。

2026年10月21日
Sundari Parekh
Read article

搜尋部落格文章

Phishing & BEC
Austrian Aeronautics Company Loses Over €42 Million to BEC Scam

Austria-based Fischer Advanced Composite Components AG (FACC), a major designer and manufacturer of aircraft components and systems, falls prey to a business email compromise (BEC) scheme that cost the company over 42 million euros in losses.

May 26th, 2016 3 min read TrendAI™ Research
Read Article
Cyber crime
Keeping Digital Assets Safe: The Need for Data Classification

This primer discusses the importance of data classification, and how organizations can implement these strategies to reduce the effects should a data breach occur.

May 20th, 2016 2 min read TrendAI™ Research
Read Article
Cybercriminal underground
2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M

Long time users of Linkedin users may very well need to change their passwords once more as a cybercriminal puts the email addresses and passwords of 117 million users up for sale.

May 18th, 2016 2 min read TrendAI™ Research
Read Article
Ransomware & extortion
CryptXXX, 7ev3n Ransomware Get Major Updates

Newly-discovered ransomware strains, CryptXXX and 7ev3n, get major updates from malware authors.

May 11th, 2016 5 min read TrendAI™ Research
Read Article
Ransomware & extortion
Reveton Ransomware Descendant, CryptXXX Discovered

A new ransomware strain, CryptXXX, was recently discovered making its rounds since the tail-end of March.

April 20th, 2016 4 min read TrendAI™ Research
Read Article
Locky Ransomware Strain Led Kentucky Hospital to an “Internal State of Emergency”

Kentucky-based Methodist Hospital announced a ransomware attack that led to an “internal state of emergency.”

March 24th, 2016 4 min read TrendAI™ Research
Read Article
The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP

Top news sites, entertainment portals, and political commentary sites were affected by a massive malvertising campaign related to the Angler Exploit Kit.

March 16th, 2016 3 min read TrendAI™ Research
Read Article
Ransomware & extortion
New Crypto-Ransomware Locky Uses Malicious Word Macros

A new crypto-ransomware type called Locky has been discovered riding on document-based macros and using infection techniques borrowed from the notorious banking malware DRIDEX.

February 19th, 2016 3 min read TrendAI™ Research
Read Article
Cyber crime
Frequently Asked Questions: BlackEnergy

What we know about BlackEnergy, a Trojan known to have been used in attacks on Ukraine power providers that caused a massive outage in late 2015.

February 11th, 2016 2 min read TrendAI™ Research
Read Article
Phishing & BEC
Security 101: Business Email Compromise (BEC) Schemes

The Federal Bureau of Investigation (FBI) released a public service announcement earlier this year warning about Business Email Compromise (BEC) schemes. Here’s what you need to know, and what you can do to prevent attacks.

January 11th, 2016 8 min read TrendAI™ Research
Read Article