Skip to main content

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

Two Critical PHP Flaws Leaked Before the Patch
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応

10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
エクスプロイトとゼロデイ
eMudhraのCA秘密鍵8件が侵害：何が起き、組織は今何をすべきか

eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
エクスプロイトとゼロデイ
CISOにとって試練の1週間：PHP、eMudhra、そして取締役会から問われること

2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。

2026年10月21日
Sundari Parekh
Read article

ブログ記事を検索

サイバー犯罪
Texas Municipalities Hit by REvil/Sodinokibi Paid No Ransom, Over Half Resume Operations

Cybercriminals who held to ransom the files of 22 Texas local government units for a combined ransom amount of US$2.5 million did not get a single cent, according to Texas state officials.

September 10th, 2019 3 min read TrendAI™ Research
Read Article
‘Purple Fox’ Malware Can Rootkit and Abuse PowerShell

This new iteration of Purple Fox that we came across, delivered by Rig, has a few new tricks up its sleeve. It retains its rootkit component by abusing publicly available code. It also abuses PowerShell making it capable of fileless infection.

September 9th, 2019 6 min read Johnlery Triunfante, Earle Maui Earnshaw, Michael Jhon Ofiaza
Read Article
Cloud security
Container Security in Six Steps

The complexity of container infrastructure, if not properly accounted for, can pose serious security risks. To minimize risks when building in containers, we came up with six steps that developers can follow.

September 5th, 2019 4 min read TrendAI™ Research
Read Article
サイバー犯罪Deepfakes
Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company

An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company.

September 5th, 2019 3 min read TrendAI™ Research
Read Article
Cloud security
The Path to Secure DevOps Initiatives: Bridging the Gap Between Security and DevOps

In a survey commissioned by Trend Micro, majority of the respondents shared their concern for the risks in implementing DevOps. Learn why consulting IT security teams in the initiatives can help bridge gaps between production and security.

August 16th, 2019 4 min read TrendAI™ Research
Read Article
マルウェア
Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times

The mobile platform is ubiquitous — enabling users to make online transactions, run their everyday lives, or even use it in the workplace. It’s no surprise that fraudsters and cybercriminals would want to cash in on it. Delivering adware, for example, enables them to monetize affected devices while attempting to be innocuous. And while they may be viewed as a nuisance at best, mobile ad fraud- and adware-related incidents became so rampant last year that it cost businesses hefty financial losses.

August 16th, 2019 5 min read Ecular Xu
Read Article
ランサムウェアと恐喝
Report: Huge Increase in Ransomware Attacks on Businesses

According to a new report, ransomware attacks against businesses increased by 363% percent year-over-year. There has also been a greater number of ransomware attacks targeting different public sectors and local governments since the start of 2019.

August 12th, 2019 3 min read TrendAI™ Research
Read Article
Malicious Spam Campaign Uses ISO Image Files to Deliver LokiBot and NanoCore

A malicious spam campaign conducted in April used ISO image files to deliver the notorious LokiBot and NanoCore trojans.

June 28th, 2019 4 min read TrendAI™ Research
Read Article
Cloud securityDevops
Container Security: Examining Potential Threats to the Container Environment

The rise in adoption of containers means a greater need for security awareness. Our infographic details the various threats that container users could encounter at each stage of the development pipeline.

May 14th, 2019 6 min read TrendAI™ Research
Read Article
サイバー犯罪フィッシングとBEC
What You Need To Know About Tax Scams

Tax season is upon us (again), and so are IRS tax scammers. How prepared are you when it comes to filing your taxes and defending against IRS tax fraud? Learn more about these scams and how you can protect yourself.

April 8th, 2019 8 min read TrendAI™ Research
Read Article