Skip to main content

TrendAI™ Deep Research

spark

注目のリサーチ記事

【ダイジェスト】ARTEXだけではない:日本を狙う3つの攻撃基盤に見るAI関与の実態

日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。

Read article
Two analysts reviewing information on computer monitors
2026年1~9月の国内公表インシデント607件から見える、公開システム対策の重要性

国内組織が2026年1~9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)
Read article
IT professional checking equipment in a server room
Webシェル侵害に備える:公開Webサーバを守る3つの視点

公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)
Read article
Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing
ランサムウェアと恐喝
ランサムウェアの次章:変わりゆくサイバー犯罪エコシステム

ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…
Read article
Cloud security
Analyzing the Risks of Using Environmental Variables for Managing Serverless Environments

We examined the potential risks associated with using the serverless environment service for secrets management.

Read Article
ランサムウェアと恐喝エクスプロイトとゼロデイ
Ransomware Spotlight: REvil

Now that the reign of REvil has come to an end, it's time to regroup and strategize. What can organizations learn from REvil’s tactics? We review the rise, downfall, and future of its operations using insights into the group's arsenal and inner inner workings.

Read Article
Cloud security
Security for the Next-Generation Retail Supply Chain

What would shopping and retail be like in the future? We considered today's technologies to predict what’s in store for retail in 2030 and what that means for security.

Read Article
ランサムウェアと恐喝
Ransomware Spotlight: Conti

Assumed to be the successor of the Ryuk ransomware, Conti is currently one of the most notorious active ransomware families used in high-profile attacks. Know all about this ransomware family and protect your company against this threat.

Read Article
サイバー犯罪アンダーグラウンド
Investigating the Emerging Access-as-a-Service Market

We examine an emerging business model that involves access brokers selling direct access to organizations and stolen credentials to other malicious actors.

Read Article
By The Numbersランサムウェアと恐喝
Examining Erratic Modern Ransomware Activities: Ransomware in Q3 2021

This latest report examines the landscape of ransomware families, both legacy and more modern threats, in the third quarter of 2021. Our tracking and investigation covered the families themselves and the types of industries and enterprises that were targeted.

Read Article
サイバー犯罪アンダーグラウンド標的型攻撃
The Far-Reaching Attacks of the Void Balaur Cybermercenary Group

Our research paper takes a close look at the cybermercenary group Void Balaur's services, activities, and targets.

Read Article
Cloud securitySoftware supply chain
The Most Common Cloud Misconfigurations That Could Lead to Security Breaches

Using Trend Micro Cloud One™ – Conformity data, we looked at the top 10 Amazon Web Services (AWS) and Microsoft Azure services with the highest misconfiguration rates with regard to the implementation of Cloud Conformity rules.

Read Article
ランサムウェアと恐喝
Modern Ransomware Shakes Up Banking, Government, Transportation Sectors in 1H 2021

Read about the impact of ransomware to critical industries in 1H, how modern ransomware operators gain initial access to organizations, and what decision-makers can do to defend against this menacing threat.

Read Article
Cloud security
Minding the Gaps: The State of Vulnerabilities in Cloud Native Applications

Our new report maps the vulnerable cracks in cloud native application security, and shows how this is a growing concern that enterprises should devote time and resources to secure.

Read Article