
TrendAI™
セキュリティブログ

注目のブログ

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
「Node2Shell」の原因となったBrotliの脆弱性:修正対象と見落としやすい組み込み先
パッチ公開前に情報が流出した2件の重大なPHP脆弱性:組織が今すぐ取るべき対応
10月20日15:20(UTC)、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。
ブログ記事を検索
Filter by:
Russian Group Cosmic Lynx Launches Over 200 BEC Campaigns
A Russian group dubbed as Cosmic Lynx initiated more than 200 BEC campaigns targeting hundreds of multinational companies.
Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted
In this report, we discussed new ransomware family Avaddon, updates on techniques of other ransomware, and our latest figures.
Patch Now: F5 Vulnerability with CVSS 10 Severity Score
F5 Networks urges users to patch their BIG-IP networking systems ASAP, after the provider disclosed two vulnerabilities, namely CVE-2020-5902 and CVE-2020-5903.
Malicious Chrome Extensions, Domains Used to Steal User Data
Browser extensions and malicious domains were used in a campaign that aims to track user activity and data.
CSO Insights: Liggett Consulting’s Mark Liggett on Connectivity and Visibility in Securing Remote Work
Mark Liggett, CEO of Liggett Consulting and longtime IT and cybersecurity key player, sits down with Trend Micro to share his thoughts on the importance of taking into account connectivity and visibility in securing WFH setups.
Millions of IoT Devices Affected by Ripple20 Vulnerabilities
The internet of things (IoT) landscape will be critically affected by the recently discovered Ripple20 vulnerabilities. This group of 19 bugs could potentially hit millions of IoT devices across many different industries.
Updated Analysis on Nefilim Ransomware’s Behavior
Through investigation of recent cases, we have amassed more information on how Nefilim ransomware operates. Some notable updates are the use of other tools and the description of events that occur within the attack phases.
Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails
We have come across a PowerShell script (mailer script) that distributes the Lemon Duck cryptominer through a new propagation method: Covid-19-themed emails with weaponized attachments.
No Entry: How Attackers Can Sneak Past Facial Recognition Devices
Access control devices that use facial recognition manage entry and exit into an enterprise’s premises. They are essentially the first line of defense for many businesses, but are they secure?
Coinminers Exploit SaltStack Vulnerabilities CVE-2020-11651 and CVE-2020-11652
We analyzed the critical vulnerabilities affecting Salt, their patches, and some threats exploiting them.