
【ダイジェスト】ARTEXだけではない:日本を狙う3つの攻撃基盤に見るAI関与の実態
日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。


日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。
国内組織が2026年1~9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。
公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。
ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。
This report discusses how malicious actors will be able to deploy harpoon whaling attacks, which are highly targeted whaling attacks on specific groups of powerful and high-ranking individuals, by abusing AI tools.
This article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.
Play is shaping up to be a player on the rise within the ransomware landscape, with its operators likely to continue using the ransomware in future. We take a deep dive into its operations and offer ways in which organizations can shore up their defenses against this emerging threat.
We discuss threats posed by phishing attacks that use CAPTCHA evasion techniques and provide a security framework to tackle such threats.
The lack of encryption and authentication mechanisms in the GTP-U protocol between base stations and 5GC UPFs could allow cybercriminals to use a packet reflection vulnerability to carry out attacks on 5G devices in internal networks.
This article gives an overview of the elements of virtual kidnapping and how malicious actors use social engineering tactics and abuse AI voice cloning tools and ChatGPT to launch these attacks.
This article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.
This report delves into the nature of pig-butchering scams, how scammers carry out their operations, the new pig-butchering tactics we’ve observed in the wild, and what individuals can do to avoid falling for these fraudulent investments and dealing with massive amounts of debt.
We detail everything you need to know about TargetCompany, a ransomware family with different monickers, including the evolution of its attack flow as it cemented its place in the threat landscape.
In this feature, we look at how the prompt investigation of warning signs can help block possible major cyberattacks. We also detail the specific security gaps of one organization that can serve as a cautionary tale for other businesses to constantly secure their systems against ransomware attacks.