Skip to main content

TrendAI™ Deep Research

spark

注目のリサーチ記事

【ダイジェスト】ARTEXだけではない:日本を狙う3つの攻撃基盤に見るAI関与の実態

日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。

Read article
Two analysts reviewing information on computer monitors
2026年1~9月の国内公表インシデント607件から見える、公開システム対策の重要性

国内組織が2026年1~9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)
Read article
IT professional checking equipment in a server room
Webシェル侵害に備える:公開Webサーバを守る3つの視点

公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)
Read article
Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing
ランサムウェアと恐喝
ランサムウェアの次章:変わりゆくサイバー犯罪エコシステム

ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…
Read article
サイバー犯罪エクスプロイトとゼロデイ
Analyzing the Data Distribution Service (DDS) Protocol for Critical Industries

The Data Distribution Service (DDS) standard drives thousands of systems every day as a middleware component for machine-to-machine communication with real-time requirements.

Read Article
ランサムウェアと恐喝マルウェア
Ransomware Spotlight: AvosLocker

AvosLocker is a relatively new ransomware variant that sports the staples of modern ransomware, namely a layered extortion scheme that begins with stolen data. We shed light on this emerging ransomware family and its key techniques.

Read Article
暗号資産Cloud security
Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups

Our research into cloud-based cryptocurrency mining sheds light on the malicious actor groups involved in this space, their ongoing battle for cloud resources, and the actual extent of the impact of their attacks.

Read Article
ランサムウェアと恐喝エクスプロイトとゼロデイ
Ransomware Spotlight: Hive

Hive ransomware is one of the new ransomware families in 2021 that poses significant challenges to enterprises worldwide. We take an in-depth look at the ransomware group’s operations and discuss how organizations can bolster their defenses against it.

Read Article
サイバー犯罪
Keeping a Close Watch: Trend Micro Specialized Cybersecurity Report for Latin America and the Caribbean

In collaboration with the Cybersecurity Program of OAS/CICTE, we examine the cybersecurity challenges affecting member states of the OAS. These issues include ransomware and active attacks, threats related to remote work, and the risks brought about by the adoption of new technologies.

Read Article
ランサムウェアと恐喝エクスプロイトとゼロデイ
Ransomware Spotlight: Clop

We take a closer look at the operations of Clop, a prolific ransomware family that has gained notoriety for its high-profile attacks. We review this ransomware group’s constantly changing schemes and discuss how companies can shore up defenses against this threat.

Read Article
サイバー犯罪
Can You Rely on OTPs? A Study of SMS PVA Services and Their Possible Criminal Uses

SMS PVA services allow their customers to create disposable user profiles or register verified accounts on many popular platforms. Unfortunately, criminals can misuse these services to conduct fraud or other malicious activities.

Read Article
IoTとスマートデバイス
5G and Aviation: A Look Into Security and Technology Upgrades Working in Tandem

Following 5G implementation in US airports, we discuss the technical features, security concerns, and potential risks this implementation carries for the industry and its customers, as well as provide some recommendations.

Read Article
IoTとスマートデバイス
Reinforcing NAS Security Against Pivoting Threats

We analyze some existing and developing threats that target NAS devices of users and businesses.

Read Article
Cloud security
GitHub Action Runners: Analyzing the Environment and Security in Action

More organizations are applying a DevOps thought-process and methodology to optimize software development. One of the main tools used in this process is a continuous integration (CI) tool, which automates the integration of code changes from multiple developers working on the same project.

Read Article