Skip to main content

TrendAI™
Blog de Seguridad

Blog de Seguridad de TrendAI

Blogs destacados

Exploits & Zero-Days
Patch Now: F5 Vulnerability with CVSS 10 Severity Score

F5 Networks urges users to patch their BIG-IP networking systems ASAP, after the provider disclosed two vulnerabilities, namely CVE-2020-5902 and CVE-2020-5903.

Read Article
Cyber crime
Malicious Chrome Extensions, Domains Used to Steal User Data

Browser extensions and malicious domains were used in a campaign that aims to track user activity and data.

Read Article
Cloud security
CSO Insights: Liggett Consulting’s Mark Liggett on Connectivity and Visibility in Securing Remote Work

Mark Liggett, CEO of Liggett Consulting and longtime IT and cybersecurity key player, sits down with Trend Micro to share his thoughts on the importance of taking into account connectivity and visibility in securing WFH setups.

Read Article
Exploits & Zero-Days
Millions of IoT Devices Affected by Ripple20 Vulnerabilities

The internet of things (IoT) landscape will be critically affected by the recently discovered Ripple20 vulnerabilities. This group of 19 bugs could potentially hit millions of IoT devices across many different industries.

Read Article
Cloud
XORDDoS, Kaiji Variants Target Exposed Docker Servers

We detected variants of two Linux botnet malware - XORDDoS and Kaiji - targeting exposed Docker servers. XORDDoS infiltrated the Docker server to infect all containers it hosts, while the Kaiji attack used its own container with its DDoS malware.

Read Article
Cyber crime
Updated Analysis on Nefilim Ransomware’s Behavior

Through investigation of recent cases, we have amassed more information on how Nefilim ransomware operates. Some notable updates are the use of other tools and the description of events that occur within the attack phases.

Read Article
Cyber crime
Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails

We have come across a PowerShell script (mailer script) that distributes the Lemon Duck cryptominer through a new propagation method: Covid-19-themed emails with weaponized attachments.

Read Article
Cyber crime
No Entry: How Attackers Can Sneak Past Facial Recognition Devices

Access control devices that use facial recognition manage entry and exit into an enterprise’s premises. They are essentially the first line of defense for many businesses, but are they secure?

Read Article
Coinminers Exploit SaltStack Vulnerabilities CVE-2020-11651 and CVE-2020-11652

We analyzed the critical vulnerabilities affecting Salt, their patches, and some threats exploiting them.

Read Article
Cloud security
Securing the 4 Cs of Cloud-Native Systems: Cloud, Cluster, Container, and Code

Cloud-native security adopts the defense-in-depth approach and divides the security strategies utilized in cloud-native systems into four different layers: cloud, container, cluster, code.

Read Article