
TrendAI™
セキュリティブログ

注目のブログ

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
「Node2Shell」の原因となったBrotliの脆弱性:修正対象と見落としやすい組み込み先
パッチ公開前に情報が流出した2件の重大なPHP脆弱性:組織が今すぐ取るべき対応
10月20日15:20(UTC)、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。
ブログ記事を検索
Filter by:
Undertaking Security Challenges in Hybrid Cloud Environments
As organizations make their move toward a more efficient and innovative future in the cloud, hybrid cloud environments pose several problems that can make or break their overall strategies.
“Twin Flower” Campaign Jacks Up Network Traffic, Downloads Files, Steals Data
Researchers detected the “Twin Flower” campaign that simulates increased clicks to boost network traffic, boosting SEO ranking and advertising revenue.
Threat Actors Deliver Courier-Themed Spam Campaign with Attached ACE Files
Trend Micro researchers detected a new courier service themed malicious spam campaign that uses ACE files as attachments.
Misconfigured Docker Daemon API Ports Attacked for Kinsing Malware Campaign
A campaign targeted misconfigured Docker Daemon API ports through Kinsing malware.
Analysis: Suspicious “Very Hidden” Formula on Excel 4.0 Macro Sheet
Cybercriminals exploit a feature in Excel that allows users to hide sheets by hiding obfuscated suspicious formulas in a “Very Hidden” sheet.
Investigation into a Nefilim Attack Shows Signs of Lateral Movement, Possible Data Exfiltration
Trend Micro’s Managed XDR (MxDR) and Incident Response (IR) teams recently investigated an incident involving a company that was hit by the Nefilim ransomware.
Threat Actors Abuse Evernote, Other Shared Platforms for Credential Phishing
Threat actors use Evernote and other platforms such as Canva, Lucidpress, and Infogram as host pages for credential phishing.
Malicious Domains and Files Related to Zoom Increase, ‘Zoom Bombing’ on the Rise
Users of video conferencing app Zoom have been targeted using suspicious domains, malicious files, and ‘Zoom bombing’ as threat actors take advantage of work-from-home arrangements brought about by COVID-19.
Russian Investigators Bust Credit Card Fraud Ring
At least 25 people allegedly including a kingpin were arrested for card fraud by Russian federal investigators.
Working From Home? Here’s What You Need for a Secure Setup
There has been an influx of employees signing in remotely to corporate networks and using cloud-based applications. But this shift could also open doors to security risks. Where should security fit in?