
TrendAI™
セキュリティブログ

注目のブログ

TrendAI™ Research、出荷前から感染していた130万台超のセットトップボックスによるボットネットの無力化に貢献
TrendAI™ Researchが数カ月にわたり提供してきたインテリジェンスが、出荷前から感染していた130万台超のセットトップボックスによるボットネットの無力化に貢献しました。本記事では、このボットネットの運営の仕組みと影響、そして無力化が防御側にとって持つ意味を解説します。
仮想パッチ:正式パッチの提供前に、より早く保護する
「Node2Shell」の原因となったBrotliの脆弱性:修正対象と見落としやすい組み込み先
ブログ記事を検索
Filter by:
Navigating Risk Management: How Red Teaming Can Prepare Your Team for Actual Cyber Attacks
This article dives into the practice of “red teaming“. Red team exercises give enterprises valuable insights into their security posture, and promote a culture of continuous improvement. It has become an integral part of global risk management.
Earth Preta Evolves its Attacks with New Malware and Strategies
In this blog entry, we discuss our analysis of Earth Preta’s enhancements in their attacks by introducing new tools, malware variants and strategies to their worm-based attacks and their time-sensitive spear-phishing campaign.
How AI Goes Rogue
This is the second blog in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights.
Why Quantum Computing Discussions Can No Longer Be Ignored
We are at the dawn of a new era in computing, one based on the principles of quantum mechanics. Quantum mechanics deals with the smallest particles in our universe, the building blocks of atoms, that form the materials of our physical world.
Silent Intrusions: Godzilla Fileless Backdoors Targeting Atlassian Confluence
Trend Micro discovered that old Atlassian Confluence versions that were affected by CVE-2023-22527 are being exploited using a new in-memory fileless backdoor.
Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem
A technical analysis on how CVE-2023-22527 can be exploited by malicious actors for cryptojacking attacks that can spread across the victim’s system.
Cyber Considerations for Organizations During Times of Conflict
This article provides a comprehensive overview of the necessary adjustments and strategies CISOs need to implement to safeguard their organizations’ assets, maintain business continuity, and uphold public trust amid conflict situations.
Uncover Cloud Attacks with Trend Vision One and CloudTrail
By 2025, Gartner has projected that over half of enterprises’ expenditure on software, infrastructure, business process services, and system infrastructure will be directed toward cloud-based solutions. We have seen this trend in enterprise spending both during and after the pandemic, on top of how fast companies are shifting to the cloud.
Play Ransomware Group’s New Linux Variant Targets ESXi, Shows Ties With Prolific Puma
Trend Micro threat hunters discovered that the Play ransomware group has been deploying a new Linux variant that targets ESXi environments. Read our blog entry to know more.
CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks
Our threat hunters discovered CVE-2024-38112, which was used as a zero-day by APT group Void Banshee, to access and execute files through the disabled Internet Explorer using MSHTML. We promptly identified and reported this zero-day vulnerability to Microsoft, and it has been patched.