TrendAI™ Deep Research

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)

Two analysts reviewing information on computer monitors

A Look Back at Security Incidents in Japan from January to September 2026

The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.

October 26th, 2026

12 min

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)

IT professional checking equipment in a server room

Key Web Server Security Considerations: Hardening Internet-Facing Servers Against Web Shell Compromise

TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.

October 26th, 2026

12 min

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…

Ransomware & extortion

Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing

Ransomware has evolved from an encryption-driven attack into one monetization path within a modular criminal economy, where access to victim environments, not the ransomware payload, is now the core commodity.

October 22nd, 2026

Search for research articles

Site search

Filter by:

By The Numbers
Deep dives
Experts' view (Expert perspective)
Investigations
Research features
Threat reports

No results found.

AI & emerging technologies
- AI
- AI governance
- Deepfakes
- Emerging technologies
- Generative AI
- LLMs
- Machine learning
Attack surface management
- ASM ASRM
Cloud & supply chain
- Cloud
- Cloud security
- Data center
- Devops
- Misconfigurations
- Software supply chain
Identity & access management
- Identity & access management (IAM)
- MFA & authentication
IoT & endpoints
- Botnets
- Connected car
- IoT & smart devices
- OT & critical infrastructure

No results found.

Construction
Distribution
Education
Energy & utilities
Financial Services
General Markets
Government
Healthcare & Life Sciences
Hospitality
Industrial & energy
Information technology
Insurance
Manufacturing
Media & entertainment
Oil & gas
Pharmaceutical
Professional services
Retail
Technology, Media, & Communications
Telecommunications
Transportation

Newest first Oldest first

No results found.

APTs
- APTs
- Cyber espionage
- Targeted attacks
Compliance
- Data privacy & regulation
- Zero trust
Cyber crime
- Cryptocurrency
- Cyber crime
- Cyber propaganda
- Cyber risk
- Cyber threats
- Cybercriminal underground
- Hacktivism
- Malware
- Phishing & BEC
- Social engineering
Ransomware
- Ransomware & extortion
- Ransomware as a Service (RaaS)
Vulnerabilities and exploits
- Exploits & Zero-Days
- Network
- Web

Misconfigured Cloud Services Pose High Security Risks for Organizations

Cloud security has become a significant issue as organizations increasingly move their workload to the cloud. A misconfigured cloud can leave organizations vulnerable to attacks.

June 27th, 2018

5 min read

Voice Data of 5.1 Million People Collected and Stored by UK Tax Authority

The UK tax authority has collected the voiceprints of over 5 million people, and a report from a privacy group shows that the organization may not be compliant with the new data protection regulations.

June 26th, 2018

3 min read

Phishing Emails Sidestep Microsoft Office 365 Filters Using ZeroFont

An old tactic is being used by cybercriminals to bypass Microsoft Office 365 (O365) filters for phishing emails. The technique, called ZeroFont, involves the manipulation of text font sizes to trick O365’s natural language processing.

June 25th, 2018

Critical Flaws Found in Phoenix Contact Industrial Switches Could Lead to DoS, Data Leaks

Four vulnerabilities, including two critical ones, in Phoenix Contact switches used in industrial systems automation could be exploited for attacks. Affected companies are strongly advised to apply patches immediately.

June 22nd, 2018

MyloBot Uses Sophisticated Evasion and Attack Techniques, Deletes Other Malware

Researchers found a new malware called MyloBot in the wild that features new attack and evasion techniques — as well as the ability to delete other existing malware in the infected system.

June 21st, 2018

Patch Now: Axis Cameras’ Flaws Could Give Attackers Control

Researchers found seven vulnerabilities in Axis cameras can be used for cyberattacks if exploited. While only POCs have been shown, customers are strongly advised to patch their firmware immediately.

June 21st, 2018

Bithumb Hacked, Promises to Cover Stolen $31 Million

Cryptocurrency exchange Bithumb suspended all services after an attack resulted in losses amounting to approximately US$31 million.

June 20th, 2018

1 min read

GitHub Hacked, Spreads Malicious Syscoin Windows Installers

Syscoin's GitHub account was hacked to distribute modified versions of their software. Developers who executed Syscoin 3.0.4.1 are advised to change their unencrypted cryptocurrency wallet passwords and back up their files.

June 19th, 2018

1 min read

Phishing Attack Leads to HealthEquity Breach, Compromises 23,000 Subscribers’ PHI

Health savings custodian HealthEquity suffered a security breach after an employee fell for a phishing attack, exposing the personal healthcare information of an estimated 23,000 individuals.

June 18th, 2018

3 min read

PyRoMineIoT Targets, Infects, and Spreads to Vulnerable IoT Devices

PyRoMineIoT malware infects systems with a Monero miner, spreads using RCE EternalRomance by removing or modifying accounts and passwords with privileged access, and scans for vulnerable Internet of Things devices for possible future attacks.

June 15th, 2018

3 min read