TrendAI™ Deep Research

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)

Two analysts reviewing information on computer monitors

A Look Back at Security Incidents in Japan from January to September 2026

The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.

October 26th, 2026

12 min

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)

IT professional checking equipment in a server room

Key Web Server Security Considerations: Hardening Internet-Facing Servers Against Web Shell Compromise

TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.

October 26th, 2026

12 min

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…

Ransomware & extortion

Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing

Ransomware has evolved from an encryption-driven attack into one monetization path within a modular criminal economy, where access to victim environments, not the ransomware payload, is now the core commodity.

October 22nd, 2026

Search for research articles

Site search

Filter by:

By The Numbers
Deep dives
Experts' view (Expert perspective)
Investigations
Research features
Threat reports

No results found.

AI & emerging technologies
- AI
- AI governance
- Deepfakes
- Emerging technologies
- Generative AI
- LLMs
- Machine learning
Attack surface management
- ASM ASRM
Cloud & supply chain
- Cloud
- Cloud security
- Data center
- Devops
- Misconfigurations
- Software supply chain
Identity & access management
- Identity & access management (IAM)
- MFA & authentication
IoT & endpoints
- Botnets
- Connected car
- IoT & smart devices
- OT & critical infrastructure

No results found.

Construction
Distribution
Education
Energy & utilities
Financial Services
General Markets
Government
Healthcare & Life Sciences
Hospitality
Industrial & energy
Information technology
Insurance
Manufacturing
Media & entertainment
Oil & gas
Pharmaceutical
Professional services
Retail
Technology, Media, & Communications
Telecommunications
Transportation

Newest first Oldest first

No results found.

APTs
- APTs
- Cyber espionage
- Targeted attacks
Compliance
- Data privacy & regulation
- Zero trust
Cyber crime
- Cryptocurrency
- Cyber crime
- Cyber propaganda
- Cyber risk
- Cyber threats
- Cybercriminal underground
- Hacktivism
- Malware
- Phishing & BEC
- Social engineering
Ransomware
- Ransomware & extortion
- Ransomware as a Service (RaaS)
Vulnerabilities and exploits
- Exploits & Zero-Days
- Network
- Web

Google and the Right to be Forgotten: Insights for GDPR Compliance

The EU General Data Protection Regulation (GDPR) is weeks away. A Google paper on the right to be forgotten highlights challenges to GDPR compliance, particularly the right to erasure. What are the the implications for organizations?

March 9th, 2018

4 min read

Large-Scale Heist of Cryptocurrency Exchange Binance Fails

Users of cryptocurrency exchange Binance began noticing irregular trading on the platform a few days ago. An investigation revealed an organized and large-scale scheme to transfer bitcoin to several malicious actors. Automatic alarms were triggered and Binance

March 9th, 2018

PoC Exploits for Memcached DDoS Attacks Published Online

There has been a sudden surge of memcached servers being abused for DDoS attacks. Proof-of-concept exploit codes have been published, but mitigation techniques and an update from the service provider are also available.

March 8th, 2018

Over 400,000 Servers Reportedly at Risk from Critical Vulnerability

Researchers have discovered a vulnerability in the mail transfer agent (MTA) Exim. If exploited, attackers could execute arbitrary code on vulnerable servers remotely. Exim has already released a patch for this and urges everyone to update immediately.

March 7th, 2018

2 min read

Point-of-Sale Malware Uncovered in Applebee’s Restaurants

RMH Franchise Holdings (RMH), which owns and operates more than 160 Applebee’s restaurants, recently disclosed that malware were uncovered on their point-of-sale (PoS) systems.

March 7th, 2018

4 min read

SgxPectre can Extract Data from Intel’s SGX Enclaves

An update of the Spectre attacks called SgxPectre can obtain data from Intel's SGX enclaves, which are supposedly secure repositories for sensitive and valuable data.

March 6th, 2018

2 min read

After Biggest Ever DDoS Attack Hits GitHub, Attackers Add Monero Ransom Demand

Attackers abuse memcached servers to cause the biggest DDoS attack recorded. The target-- software development platforms GitHub-- was down for only 10 minutes.

March 5th, 2018

Cyber crime Phishing & BEC

InfoSec Guide: Domain Monitoring — Detecting Phishing Attacks (Part 1)

A lot of best practices teach users how to prevent or defend against phishing attacks, but how can organizations actively detect and thwart them before users even see them?

March 5th, 2018

9 min read Cedric Pernet

OMG Mirai Variant Turns IoT Devices Into Proxy Servers

A new Mirai variant dubbed as OMG was found targeting IoT devices and can turn them into proxy servers, aside from Mirai’s original denial-of-service attack capabilities.

February 28th, 2018

New Campaign Exploits CVE-2018-4878 Anew via Malicious Microsoft Word Documents

A new campaign exploiting CVE-2018-4878 involves the use of malicious spam — specifically with a spam email that with an embedded link that directs the recipient to a Microsoft Word lure document.

February 27th, 2018