Skip to main content

TrendAI™
資安部落格

TrendAI 資安部落格

熱門文章

Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
兩大 PHP重大高風險漏洞 CVE-2026-109618／109619 修補前遭外洩：企業與 IT 團隊當前應對指南

2026 年 10 月 20 日，兩個可導致遠端程式碼執行（RCE）的 PHP 重大漏洞在官方修補前於 Hacker News 遭披露。貼文雖已被移除，但截圖已在 X 與 Mastodon 上流傳。本文整理兩大高風險漏洞（CVE-2026-109618 與 CVE-2026-109619）的詳細資訊、潛在影響以及企業當前應採取的七步驟緊急應對與防禦措施。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
Exploits & Zero-Days
eMudhra 8 組 CA 私鑰遭破解：企業 TLS 憑證風險與 6 大應變措施

eMudhra 8 組中繼 CA 憑證私鑰遭破解，金鑰最短僅 3 位元。TrendAI™ 說明 SSL 憑證與程式碼簽章風險、受影響的 Chrome、Linux、Go、Node.js 等環境，以及企業資安團隊現在應採取的 6 項修補行動與威脅追蹤指標。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
Exploits & Zero-Days
CISO 驚魂一週：PHP 重大漏洞、eMudhra 憑證金鑰外洩，以及董事會一定會問的五個問題

兩個 PHP 重大漏洞在修補程式釋出前遭外洩，同一天 Mozilla 揭露 eMudhra 憑證授權中心（CA）金鑰強度不足。趨勢科技TrendAI™ 全球資安長 Sundari Parekh 為資安領導者提供一套實務行動指南。

2026年10月21日
Sundari Parekh
Read article

搜尋部落格文章

World Backup Day: What, When, Where and Why You Need to Back up and How to do it

Observe World Backup Day by learning why you should back up, what to back up, where to store them, when you should do it, and how to do it.

March 31st, 2015 5 min read TrendAI™ Research
Read Article
Cyber crimeMalware
Malvertising: When Online Ads Attack

Cybercriminals are increasingly using malicious advertisements as a platform for spreading malware. Find out how they work how you can protect yourself from these online threats.

March 19th, 2015 3 min read TrendAI™ Research
Read Article
Targeted attacks
Millions Affected in Anthem Breach, Healthcare Companies Prime Attack Targets

Tens of millions of current and former customers and employees of Anthem Inc., the second largest health insurance provider in the United States, are reportedly affected in a targeted attack.

February 10th, 2015 3 min read TrendAI™ Research
Read Article
APTsCyber crime
The Hack of Sony Pictures: What We Know and What You Need to Know

While Sony recovers from the massive hack, we continue to monitor investigations and developments. Here's a rundown of what happened, what was stolen, who’s being implicated, and tips on how you can defend against likely attacks. [updated]

December 8th, 2014 3 min read TrendAI™ Research
Read Article
IoT & smart devices
What to Consider When Buying a Smart Device

Buying into the Internet of Things starts out with smart home devices. Unfortunately, connecting your home devices to the Internet has its drawbacks. Here are some important factors to consider before buying smart devices for the home.

August 4th, 2014 TrendAI™ Research
Read Article
APTsCyber crime
PLEAD Campaign Attacks Taiwan Ministries

The PLEAD campaign is the second attack to target entities in Taiwan in the first half of 2014. Taiwanese agencies were also targeted in May using a Microsoft Word zero-day vulnerability.

July 27th, 2014 TrendAI™ Research
Read Article
Cyber crimeCryptocurrency
.Bit Domain Used To Deliver Malware and other Threats

For many users, .com is the only domain that matters. But when cybercriminals start using .bit, a new kind of top-level domain (TLD) for malicious activities, people are bound to take notice.

November 19th, 2013 1 min read TrendAI™ Research
Read Article
Cyber threats
Hacking Tools, Survey Scam Target Facebook Users
June 6th, 2012 3 min read TrendAI™ Research
Read Article