
TrendAI™
セキュリティブログ

注目のブログ

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
「Node2Shell」の原因となったBrotliの脆弱性:修正対象と見落としやすい組み込み先
パッチ公開前に情報が流出した2件の重大なPHP脆弱性:組織が今すぐ取るべき対応
10月20日15:20(UTC)、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。
ブログ記事を検索
Filter by:
Addressing Threats Like Ryuk via Trend Micro XDR
Our infographic shows how Trend Micro XDR is designed to combat threats like Ryuk using machine learning and analytics to correlate various events across multiple layers.
Mispadu Banking Trojan Resurfaces
Recent spam campaigns leading to URSA/Mispadu has been uncovered. This attack targets systems with Spanish and Portuguese as system languages.
CSO Insights: Ricoh USA’s David Levine on Employing a Cloud- and Cybersecurity-First Strategy
David Levine, Vice President of Corporate and Information Security and CSO for Ricoh USA, Inc., shares his thoughts on reinforcing a security mindset in the organization and how a cloud-first strategy helps enable their operations in the "new normal"
Malicious Docker Hub Container Images Used for Cryptocurrency Mining
In our monitoring of Docker-related threats, we came across a threat actor who uploaded malicious images to Docker Hub for cryptocurrency mining.
Threat Recap: Darkside, Crysis, Negasteal, Coinminer
Darkside ransomware surfaced, operators behind Crysis/Dharma released a hacking toolkit, a targeted email campaign was used to propagate Negasteal, and a coinminer was seen bundled with legitimate applications.
Influential Facebook Brand Pages Stolen via Credential Phishing
We found some fake Facebook accounts stolen from influential accounts to sell, change the details, and/or reused for phishing.
Patch List: Adobe, Citrix, Intel, and vBulletin Vulns
We rounded up information on recently published patches for Adobe, Citrix, Intel, and vBulletin.
XCSSET Mac Malware: Infects Xcode Projects, Uses 0Days
Further investigation led us to a developer’s Xcode project that contained XCSSET source malware, which leads to a rabbit hole of malicious payloads. Most notable in our investigation is the discovery of two zero-day exploits.
Online Dating Websites Lure Japanese Customers to Scams
We found online dating website scam campaigns primarily targeting Japanese customers for their personal and financial information.
Application Security 101
Security issues often arise as a result of applications being rushed for deployment without adequate checks and protections. What are the top security risks to applications and what can organizations do to secure their DevOps pipeline?