Skip to main content

TrendAI™ Deep Research

spark

注目のリサーチ記事

【ダイジェスト】ARTEXだけではない:日本を狙う3つの攻撃基盤に見るAI関与の実態

日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。

Read article
Two analysts reviewing information on computer monitors
2026年1~9月の国内公表インシデント607件から見える、公開システム対策の重要性

国内組織が2026年1~9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)
Read article
IT professional checking equipment in a server room
Webシェル侵害に備える:公開Webサーバを守る3つの視点

公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)
Read article
Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing
ランサムウェアと恐喝
ランサムウェアの次章:変わりゆくサイバー犯罪エコシステム

ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…
Read article
AIソーシャルエンジニアリング
Exploiting AI: How Cybercriminals Misuse and Abuse AI and ML

We discuss the present state of the malicious uses and abuses of AI and ML and the plausible future scenarios in which cybercriminals might abuse these technologies for ill gain.

Read Article
サイバー犯罪アンダーグラウンドCloud security
Cybercriminal ‘Cloud of Logs’: The Emerging Underground Business of Selling Access to Stolen Data

We take a closer look at an emerging underground market that is driven by malicious actors who sell access to a gargantuan amount of stolen data, frequently advertised in the underground as “cloud of logs."

Read Article
Cloud security
Supply Chain Attacks in the Age of Cloud Computing: Risks, Mitigations, and the Importance of Securing Back Ends

A critical asset that enterprises should give careful security consideration to is their back-end infrastructure which, if compromised, could lead to supply chain attacks.

Read Article
IoTとスマートデバイス
A Ride on Taiwan’s Self-Driving Bus

We went for a ride on the self-driving bus now being tested in Taiwan. Here are our insights.

Read Article
Operation Earth Kitsune: Tracking SLUB’s Current Operations

A watering hole campaign we dubbed as Operation Earth Kitsune is spying on users’ systems through compromised websites. Using SLUB and two new malware variants, the attacks exploit vulnerabilities including those of Google Chrome and Internet Explorer.

Read Article
Devops
The Basics of Keeping Kubernetes Clusters Secure

With Kubernetes’ popularity and high adoption rates, its security should always be prioritized. We provide vital tips and recommendations on keeping the master node, the API server, etcd, RBAC, and network policies secure.

Read Article
サイバー犯罪アンダーグラウンド
Inside the Bulletproof Hosting Business: Cybercriminal Methods and OpSec

Bulletproof hosting (BPH) services have long been crucial parts of the cybercriminal infrastructure. How do they protect malicious activities, and how do cybercriminals use them to stay in business?

Read Article
エクスプロイトとゼロデイ
Securing Enterprise Security: How to Manage the New Generation of Access Control Devices

Given the increasing use by enterprises of contactless security solutions, the security of the devices that themselves are meant to control access to premises should be of prime consideration.

Read Article
サイバー犯罪アンダーグラウンド
Commodified Cybercrime Infrastructure: Exploring the Underground Services Market for Cybercriminals

The provision of services, as well as the way criminals operate in the underground, have gone through many changes over the years to cater to the market’s different infrastructure demands.

Read Article
サイバー犯罪フィッシングとBECソーシャルエンジニアリング
New Bait Used in Instagram Profile Hacking Scheme

Hackers spread messages supposedly sent from Instagram Help Center claiming that the user's account is at risk of being deleted.

Read Article