Skip to main content

トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表

TrendAI™ Deep Research

spark

注目のリサーチ記事

【ダイジェスト】ARTEXだけではない:日本を狙う3つの攻撃基盤に見るAI関与の実態

日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。

Read article
Two analysts reviewing information on computer monitors
2026年1~9月の国内公表インシデント607件から見える、公開システム対策の重要性

国内組織が2026年1~9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。

Junsuke Sawarame (Security GO Editorial Team), Reviewed by Katsuyuki Okamoto and Takeshi Sato (Security Evangelists)
Read article
IT professional checking equipment in a server room
Webシェル侵害に備える:公開Webサーバを守る3つの視点

公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。

Yuya Sato, Edited by Junsuke Sawarame (Security GO Editorial Team)
Read article
Ransomware’s Next Chapter: How the Criminal Ecosystem Is Changing
ランサムウェアと恐喝
ランサムウェアの次章:変わりゆくサイバー犯罪エコシステム

ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。

Asako Koizumi, Christopher Boyton, David Sancho, Joshua Paul Ignacio…
Read article
エクスプロイトとゼロデイ
The State of SCADA HMI Vulnerabilities

A complete discussion of the different vulnerability categories, including case studies of vulnerable SCADA HMIs. The paper also provides a guide for vulnerability researchers, as well as vendors on quick and efficient bug discovery.

Read Article
IoTとスマートデバイスBotnets
Protecting Home Networks: Start by Securing the Router

As home routers add more features, securing them becomes more difficult. End users should be aware of the effects of compromise, and how to protect their home routers.

Read Article
IoTとスマートデバイスエクスプロイトとゼロデイ
Rogue Robots: Testing the Limits of an Industrial Robot’s Security

The modern world relies heavily on industrial robots. But is the current robotics ecosystem secure enough to withstand a cyber attack?

Read Article
サイバー犯罪APT
From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years

This paper takes a look at Pawn Storm's operations within the last two years, and how the group has expanded their activities from espionage to the use of cyber propaganda tactics.

Read Article
マルウェア
How can Advanced Sandboxing Techniques Thwart Elusive Malware?

Sandboxes are typically the last line of defense for many traditional security solutions. For elusive malware that can escape them, however, not just any sandbox will do.

Read Article
IoTとスマートデバイスOT & critical infrastructure
US Cities Exposed in Shodan

An in-depth analysis of Shodan data reveals how some of the biggest US cities fare in terms of exposed cyber assets, what this means in terms of security, and how home users and organizations can protect their data.

Read Article
エクスプロイトとゼロデイ
Securing Your Routers Against Mirai and Other Home Network Attacks

Cybercriminals can turn unsecure home routers into slaves for their botnets or even abuse them to steal banking credentials. Know about your router’s hidden weaknesses and the many ways you can defend your homes and businesses against these threats.

Read Article
サイバー犯罪
The Cybercriminal Roots of Selling Online Gaming Currency

The sale of online gaming currencies, while not illegal, has been found to have cybercriminal ties. This research paper covers how cybercriminals use the profits from the trade of these virtual currencies to fund other attacks.

Read Article
サイバー犯罪データプライバシーと規制
Are Pagers Leaking Your Patients’ PHI?

With a little SDR knowledge and a $20 USB dongle, attackers can read unencrypted pager messages from tens of kilometers away. Who still uses pagers in this day and age? Healthcare facilities. Goodbye, PHI.

Read Article
Dark Motives Online: An Analysis of Overlapping Technologies Used by Cybercriminals and Terrorist Organizations

Research on the common technologies used by cybercriminals and terrorists to benefit their cause, from the services they abuse to the tools they’ve homebrewed to streamline activities.

Read Article