Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
Exploits & Zero-Days
eMudhra 8 組 CA 私鑰遭破解：企業 TLS 憑證風險與 6 大應變措施

eMudhra 8 組中繼 CA 憑證私鑰遭破解，金鑰最短僅 3 位元。TrendAI™ 說明 SSL 憑證與程式碼簽章風險、受影響的 Chrome、Linux、Go、Node.js 等環境，以及企業資安團隊現在應採取的 6 項修補行動與威脅追蹤指標。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Exploits & Zero-Days
CISO 驚魂一週：PHP 重大漏洞、eMudhra 憑證金鑰外洩，以及董事會一定會問的五個問題

兩個 PHP 重大漏洞在修補程式釋出前遭外洩，同一天 Mozilla 揭露 eMudhra 憑證授權中心（CA）金鑰強度不足。趨勢科技TrendAI™ 全球資安長 Sundari Parekh 為資安領導者提供一套實務行動指南。

2026年10月21日
Sundari Parekh
Read article

搜尋部落格文章

OT & critical infrastructure
First Malware-Driven Power Outage Reported in Ukraine

Malware found in power suppliers' systems may be responsible for causing a massive power outage in Ukraine.

January 6th, 2016 4 min read TrendAI™ Research
Read Article
Phishing & BECTargeted attacks
Spear Phishing 101: What is Spear Phishing?

The objective of spear phishing and phishing are ultimately the same—to trick a target into opening an attachment or click on a malicious embedded link. But what is spear phishing? Learn more from this article.

September 24th, 2015 4 min read TrendAI™ Research
Read Article
FBI Warns Public on Dangers of the Internet of Things

The FBI released a Public Service Announcement that warns about the potential security risks of the IoT. Learn more about these risks and their real-life consequences.

September 17th, 2015 3 min read TrendAI™ Research
Read Article
Exploits & Zero-DaysSoftware supply chain
Virtual Patching in Mixed Environments: How It Protects You

A primer on the advantages of implementing virtual patching to protect systems against unpatched vulnerabilities.

August 20th, 2015 2 min read TrendAI™ Research
Read Article
Hacktivism
Hacktivism 101: A Brief History and Timeline of Notable Incidents

While not done for profit, hacktivism has forced companies and organizations to face critical security challenges. Find out what it is and how it evolved from being the “Internet’s voice” to one of today's biggest security threats.

August 17th, 2015 5 min read TrendAI™ Research
Read Article
Data privacy & regulationIoT & smart devices
Security On-The-Go: Setting up a Virtual Private Network (VPN)

There are privacy and security risks involved in connecting to public or 'free' Wi-fi hotspots. Here's a 4-step guide to setting up a virtual private network (VPN) for the times when you have to connect to unfamiliar networks.

June 24th, 2015 2 min read TrendAI™ Research
Read Article
IoT & smart devices
The Case for Making BYOD Safe

BYOD networks can benefit both the workers and the company, but it also presents a number of potential risks. This infographic details the challenges of balancing employee freedom, functionality, and security on BYOD.

May 29th, 2015 2 min read TrendAI™ Research
Read Article
Gone Phishing: How Phishing Leads to Hacked Accounts and Identity Theft

Phishing continues to be a popular method used by cybercriminals to trick users into giving out their personal information and credentials. Before you become a victim, learn about popular phishing techniques, and how to spot a phishing attempt.

May 6th, 2015 6 min read TrendAI™ Research
Read Article
Data privacy & regulation
Identity Theft and the Value of Your Personal Data

How dangerous is it to leave your personal information—your name, your social security number, your credit card and financial details, even your email address and phone number—where other people can access them?

April 30th, 2015 3 min read TrendAI™ Research
Read Article
Ransomware & extortion
Ransomware: What It Is and How You Can Protect Yourself

Ransomware is a type of malware that locks your computer screen and prevents you from accessing your files until you pay a “ransom”. Learn more about this type of malware and how you can prevent likely attacks.

April 21st, 2015 5 min read TrendAI™ Research
Read Article