Skip to main content

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

BotnetsIoTとスマートデバイス
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応

10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。

2026年10月22日
TrendAI™ Research
Read article

ブログ記事を検索

Cloud security
Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection)

This article zeroes in on certain security considerations that developers need to know and the ways that they can build the best defense for container-based and serverless applications through runtime application self-protection (also known as RASP).

March 23rd, 2021 7 min read TrendAI™ Research
Read Article
APT
Earth Vetala – MuddyWater Continues to Target Organizations in the Middle East

Trend Micro researchers recently detected activity suspected to be from MuddyWater. This campaign targets various organizations in the Middle East and neighboring regions.

March 5th, 2021 8 min read Adi Peretz, Erick Thek
Read Article
Cloud security
Identifying Weak Parts of a Supply Chain

Malicious attacks have consistently been launched on weak points in the supply chain. Like all attacks, these will evolve into more advanced forms. Software development, with multiple phases that could be placed at risk, is particularly vulnerable.

March 3rd, 2021 6 min read David Fiser
Read Article
SHAREit Flaw Could Lead to Remote Code Execution

We discovered vulnerabilities in the SHAREit application. These vulnerabilities can be abused to leak a user’s sensitive data, execute arbitrary code, and possibly lead to remote code execution. The app has over 1 billion downloads.

February 15th, 2021 5 min read Echo Duan, Jesse Chang
Read Article
フィッシングとBEC
Cybercriminals kick-off 2021 with sweepstakes, credit card, delivery scams

We discuss the behaviors and external indicators of some phishing campaigns that we observed from the latter part of December 2020 to the first weeks of January 2021.

January 21st, 2021 10 min read Paul Miguel Babon
Read Article
フィッシングとBEC
Phishing Technique Uses Legitimate-looking Domains to Avoid Detection

Cybercriminals use legitimate-looking domains in their phishing-and-scam schemes in an effort to lure more victims and avoid early detection.

December 28th, 2020 3 min read Paul Miguel Babon
Read Article
サイバー犯罪
Negasteal Uses Hastebin for Fileless Delivery of Crysis Ransomware

We discovered a Negasteal variant that uses hastebin to filelessly deliver Crysis ransomware to the victim's system.

December 18th, 2020 3 min read Matthew Camacho, Raphael Centeno, Junestherry Salvador
Read Article
サイバー犯罪APT
Using MITRE ATT&CK to Identify an APT Attack

We analyzed the tools, relationships, and behaviors used in a long-standing intrusion of a company after its security team observed malicious C&C traffic.

December 15th, 2020 4 min read Lenart Bermejo, Gilbert Sison, Buddy Tancio
Read Article
IoTとスマートデバイス
A Security Guide to IoT-Cloud Convergence

The integration of the IoT and cloud computing poses new possibilities for industries. It is important not to overlook their respective security risks and the measures to take against them when the two technologies converge.

December 10th, 2020 9 min read TrendAI™ Research
Read Article
エクスプロイトとゼロデイIoTとスマートデバイス
Securing IoT Apps

Many work-from-home employees use devices for personal and business purposes in home networks that are not as secure as that of the office. This article discusses the threats to unsecure IoT apps and provides ways to secure them.

November 26th, 2020 8 min read TrendAI™ Research
Read Article