Skip to main content

トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表

TrendAI™ Deep Research

spark

注目のリサーチ記事

【ダイジェスト】ARTEXだけではない:日本を狙う3つの攻撃基盤に見るAI関与の実態

日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。

Read article
Two analysts reviewing information on computer monitors
2026年1~9月の国内公表インシデント607件から見える、公開システム対策の重要性

国内組織が2026年1~9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)
Read article
IT professional checking equipment in a server room
Webシェル侵害に備える:公開Webサーバを守る3つの視点

公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)
Read article
Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing
ランサムウェアと恐喝
ランサムウェアの次章:変わりゆくサイバー犯罪エコシステム

ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…
Read article
OT & critical infrastructureエクスプロイトとゼロデイ
Attacks Against Industrial Machines via Vulnerable Radio Remote Controllers: Security Analysis and Recommendations

Radio frequency (RF) technology is being used in operations to control various industrial machines. However, the lack of implemented security in RF communication protocols could lead to production sabotage, system control, and unauthorized access.

Read Article
Ransomware MongoLock Immediately Deletes Files, Formats Backup Drives

We found a wave of MongoLock ransomware attacks that immediately deletes important files upon infection and scans the backup drives for data deletion.

Read Article
IoTとスマートデバイスOT & critical infrastructure
MQTT and CoAP: Security and Privacy Issues in IoT and IIoT Communication Protocols

We looked into MQTT brokers and CoAP servers around the world to assess IoT protocol security. Learn how to prevent risks and secure machine-to-machine (M2M) communications over MQTT and CoAP in our research.

Read Article
暗号資産マルウェア
Cryptocurrency-mining Malware Targets Linux Systems, Uses Rootkit for Stealth

We recently encountered a cryptocurrency-mining malware affecting Linux systems. It is notable for being bundled with a rootkit component that hides the malicious process’ presence from monitoring tools.

Read Article
OT & critical infrastructure
Critical Infrastructures Exposed and at Risk: Energy and Water Industries

Securing energy and water should remain top priority in the continuing integration of the industrial internet of things in these critical sectors.

Read Article
サイバー犯罪
Evolution of Cybercrime

To move forward, we need to look into the past to figure out what the best course of action is. Take a trip down memory lane with this infographic to see how far we've come in securing the digital world.

Read Article
サイバー犯罪サイバー犯罪アンダーグラウンド
Data Breaches 101: How They Happen, What Gets Stolen, and Where It All Goes

Data breaches take time and a lot of effort to pull off, but successful breaches can affect not just organizations, but also millions of people. Learn what a data breach is, what types of data is usually stolen, and what happens to stolen data.

Read Article
サイバー犯罪アンダーグラウンド
The Rise and Fall of Scan4You

We delved into the rise and fall of Scan4You, the largest counter antivirus service in the underground, its operators, and the ties that bind them to other cybercriminals.

Read Article
サイバー犯罪
Exposed Video Streams: How Hackers Abuse Surveillance Cameras

IP surveillance cameras provide certain conveniences, but control of this can fall into the wrong hands. What threats are there for these devices and what can be done to minimize risk?

Read Article
エクスプロイトとゼロデイ
Exposed Devices and Supply Chain Attacks: Overlooked Risks in Healthcare Networks

This research examines the oft-overlooked infection vectors in today’s healthcare networks: exposed medical devices and supply chain attacks.

Read Article