エクスプロイトとゼロデイ
セキュリティ101：仮想パッチ
パッチが適用されていない、または脆弱性を抱えるアプリケーションや組織のITインフラは、どのようなリスクにさらされるのでしょうか。本記事では、企業の脆弱性管理とパッチ管理にまつわる課題を仮想パッチがどのように解決するのかを解説します。
August 25th, 2026 5 min read
TrendAI™ Research
August 25th, 2026 
5 min read
Read article
TrendAI™ Deep Research
注目のリサーチ記事
APT
2026年上半期のAPT動向を分析: 「信頼」を武器化する攻撃者
国家との関連が疑われる攻撃者は、攻撃チェーンのあらゆる段階にAIを組み込みながら、防御側がすでに信頼しているサービスの内側に自らのインフラを潜ませています。本レポートでは、こうした活動を突き動かす地政学的背景と、防御側が次に優先すべき対策を読み解きます。
August 20th, 2026
Read article
AI governance
ソブリンAIのセキュリティ確保：物理・ソフトウェア・モデルの各サプライチェーンにわたる実践的コントロール
ソブリンAIでは、セキュリティスタックのあらゆるレイヤーの責任が運用者の手に委ねられます。本記事では、この転換に伴う脅威と、国家が保有するAIシステムの信頼性を保つための実践的なコントロールをあわせて解説します。
August 11th, 2026
Read article
Cloud security
見えないアタックサーフェス：データセンター周辺で露出する数千台の産業制御システム
TrendAI™ Researchが米国のデータセンター周辺にあるICSプロトコルを調査したところ、冷却、電力、環境設備といった重要インフラを制御する数千台の脆弱なデバイスが見つかりました。運用効率を重視し、セキュリティを前提とせずに設計されたこれらのシステムは、公開インターネットからアクセス可能な状態にありました。
August 8th, 2026 43 min
Read article
リサーチ記事を検索
Site search
Filter by:
Malicious Docker Hub Container Images Used for Cryptocurrency Mining
In our monitoring of Docker-related threats, we came across a threat actor who uploaded malicious images to Docker Hub for cryptocurrency mining.
August 19th, 2020 3 min read
Read Article
Cloud security
Shedding Light on Security Considerations in Serverless Cloud Architectures
Serverless computing is not immune to risks and threats. Our security research provides a comprehensive analysis of the possible attack scenarios that could compromise serverless services and deployments.
August 11th, 2020 7 min read
Read Article
OT & critical infrastructure
Lost in Translation: When Industrial Protocol Translation goes Wrong
This research paper looks at protocol gateways, which translate various protocols used by different industrial devices and machinery, and provides insight into the security issues and vulnerabilities found in these devices as well as ways to secure them.
August 5th, 2020 4 min read
Read Article
IoTとスマートデバイス
Unveiling the Hidden Risks of Industrial Automation Programming
The legacy programming environments of widely used industrial machines could harbor virtually undetectable vulnerabilities and malware. Our security analysis of these environments reveals critical flaws and their repercussions for smart factories.
August 4th, 2020 6 min read
Read Article
サイバー犯罪アンダーグラウンド
Hacker Infrastructure and Underground Hosting 101:Where Are Cybercriminal Platforms Offered?
Underground platforms are part of a mature ecosystem for trading cybercrime goods and services. How does a capable hosting infrastructure allow illicit activities to thrive?
July 21st, 2020 5 min read
Read Article
Cloud security
Infrastructure as Code: Security Risks and How to Avoid Them
Infrastructure as Code (IaC) is a key DevOps practice that bolsters agile software development. In this report, we identify security risk areas in IaC implementations and the best practices in securing them in hybrid cloud environments.
July 14th, 2020 8 min read
Read Article
Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted
In this report, we discussed new ransomware family Avaddon, updates on techniques of other ransomware, and our latest figures.
July 8th, 2020 7 min read
Read Article
IoTとスマートデバイス Botnets
Caught in the Crossfire: Defending Devices From Battling Botnets
As cybercriminals compete for dominance in their bid to create powerful botnets, users can make their own stand against warring sides by understanding how botnet malware works and securing their devices.
July 7th, 2020 4 min read
Read Article
サイバー脅威
Cyberattacks from the Frontlines: Incident Response Playbook for Beginners
In the event of a cyberattack a strong incident response plan can get a business running again with minimal damages. Understand the response process in this playbook.
June 24th, 2020 10 min read
Read Article
サイバー犯罪 マルウェア
Tracking, Detecting, and Thwarting PowerShell-based Malware and Attacks
PowerShell's ubiquity has made it one of the most common tools cybercriminals abuse to perpetrate attacks and deliver fileless malware to systems. Here's how to track and defend against them.
June 5th, 2020 9 min read
Read Article