Skip to main content

TrendAI™ Deep Research

spark

注目のリサーチ記事

【ダイジェスト】ARTEXだけではない:日本を狙う3つの攻撃基盤に見るAI関与の実態

日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。

Read article
Two analysts reviewing information on computer monitors
2026年1~9月の国内公表インシデント607件から見える、公開システム対策の重要性

国内組織が2026年1~9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)
Read article
IT professional checking equipment in a server room
Webシェル侵害に備える:公開Webサーバを守る3つの視点

公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)
Read article
Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing
ランサムウェアと恐喝
ランサムウェアの次章:変わりゆくサイバー犯罪エコシステム

ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…
Read article
Ransomware as a Service: Enabler of Widespread Attacks

Ransomware as a service (RaaS) equips prospective attackers, even those who possess minimal technical skills and knowledge, with the ammunition they need to launch attacks. This in turn helps ransomware spread quickly to more targets. What exactly is RaaS, and which ransomware families and techniques are associated with it?

Read Article
IoTとスマートデバイスランサムウェアと恐喝
IoT and Ransomware: A Recipe for Disruption

Ransomware can impact industrial operations in the bid to cause disruptions. Organizations need to reevaluate the security of their IoT environments in the face of such a threat.

Read Article
Connected carIoTとスマートデバイス
A Roadmap to Secure Connected Cars: Charting the WP.29's UN Regulation No. 155

As connected cars become more commonplace, the UN Regulation No. 155 sets guidelines to ensure cybersecurity in vehicles. This research assesses the risks of its highlighted attack vectors and looks beyond its scope to identify top priorities.

Read Article
サイバー犯罪アンダーグラウンドAPT
Earth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign

Our research provides a detailed analysis of the new tools and techniques used by Earth Baku in its cyberespionage campaign against organizations in the Indo-Pacific region.

Read Article
Cloud security
Linux Threat Report 2021 1H: Linux Threats in the Cloud and Security Recommendations

Linux powers many cloud infrastructures today. However, it is not immune to threats and risks. We discuss several pressing security issues including malware and vulnerabilities that compromise Linux systems in the first half of 2021.

Read Article
サイバー犯罪
TeamTNT Activities Probed: Credential Theft, Cryptocurrency Mining, and More

Our research sheds light on the tools and techniques used by TeamTNT and the potential impact of the group’s sundry malicious activities.

Read Article
サイバー犯罪アンダーグラウンド
Trends and Shifts in the Underground N-Day Exploit Market

Our two-year research provides insights into the life cycle of exploits, the types of exploit buyers and sellers, and the business models that are reshaping the underground exploit market.

Read Article
IoTとスマートデバイス
2020 Report: ICS Endpoints as Starting Points for Threats

ICS endpoint security has become more important as the interconnection between IT and OT continues to grow. Our research shares the status of global industrial systems in terms of security against both known and new threats that hound ICS endpoints.

Read Article
IoTとスマートデバイスOT & critical infrastructure
Islands of Telecom: Risks in IT

Using an island resort analogy, we detail sample scenarios and potential risks of telecommunications IT for organizations and telecommunications companies, along with our recommendations.

Read Article
ランサムウェアと恐喝エクスプロイトとゼロデイ
Ransomware Double Extortion and Beyond: REvil, Clop, and Conti

Ransomware-stricken organizations grapple with multilevel extortion schemes that are advancing at an alarming rate. What exactly happens in these campaigns? We scrutinize three active ransomware families associated with these schemes to find out.

Read Article