Skip to main content

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

Two Critical PHP Flaws Leaked Before the Patch
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応

10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
エクスプロイトとゼロデイ
eMudhraのCA秘密鍵8件が侵害：何が起き、組織は今何をすべきか

eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
エクスプロイトとゼロデイ
CISOにとって試練の1週間：PHP、eMudhra、そして取締役会から問われること

2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。

2026年10月21日
Sundari Parekh
Read article

ブログ記事を検索

マルウェア
Google Playで偽銀行アプリを確認、スペイン語圏ユーザを狙うスミッシングに利用

ユーザが銀行の提供するアプリやサービスを利用するようになるにつれ、詐欺師にとっての機会も拡大しています。その最近の一例が、スペイン語圏のユーザを狙ったスミッシング詐欺の一環として利用されたアプリ「Movil Secure」です。

November 7th, 2018 4 min read Echo Duan
Read Article
エクスプロイトとゼロデイ
Virtual Patching: Patch Those Vulnerabilities before They Can Be Exploited

The average organization takes over 30 days to patch operating systems and software, and longer for more complex business applications and systems. This infographic shows how virtual patching solutions can help mitigate threats from vulnerabilities.

October 25th, 2018 4 min read TrendAI™ Research
Read Article
標的型攻撃
LoJax UEFI Rootkit Used in Cyberespionage

Security researchers came across a Unified Extensible Firmware Interface (UEFI) rootkit in the wild being used for cyberespionage. Named LoJax, the rootkit is reportedly packaged with other tools that modifies the system’s firmware to infect it with malware.

October 1st, 2018 3 min read TrendAI™ Research
Read Article
サイバー犯罪
.EGG Files in Spam Delivers GandCrab v4.3 Ransomware to South Korean Users

We discovered spam mails abusing EGG (.egg) files to deliver the GandCrab v4.3 ransomware. Additionally, the operators behind the spam mails appear to be specifically going after South Korean users, as evidenced by the use of Hangul in the spam mails.

August 20th, 2018 2 min read Donald Castillo
Read Article
エクスプロイトとゼロデイ
Over 200,000 MikroTik Routers Compromised in Cryptojacking Campaign

Security researchers uncovered a cryptojacking campaign that exploits a vulnerability in MikroTik routers to inject a malicious version of Coinhive. Here’s what you need to know.

August 3rd, 2018 3 min read TrendAI™ Research, TrendAI Rese
Read Article
マルウェア
Fileless Malware PowerGhost Targets Corporate Systems

A new fileless malware utilizes Powershell and EternalBlue via WMI for propagation, infecting workstations and servers connected to a local server with a cryptocurrency miner and a DDos tool. Significant infections have been detected in North America and Europ

July 30th, 2018 2 min read TrendAI™ Research
Read Article
フィッシングとBEC
FBI Report: Global BEC Losses Exceeded US$12 Billion in 2018

The Federal Bureau of Investigation (FBI) issued a public service announcement (PSA) regarding the continued increase of Business Email Compromise (BEC) scams, which total global losses have already reached over US$12 billion in 2018.

July 18th, 2018 2 min read TrendAI™ Research
Read Article
Cloud security
Security by Design: A Checklist for Safeguarding Virtual Machines and Containers

Here are some considerations and best practices that developers, IT operations professionals, and system administrators should take into account in securing the infrastructures that power the applications they use.

May 22nd, 2018 5 min read TrendAI™ Research
Read Article
FacexWorm Abuses Facebook Messenger for Propagation

Our Cyber Safety Solutions team identified a malicious Chrome extension we named FacexWorm, which uses a miscellany of techniques to target cryptocurrency trading platforms accessed on an affected browser and propagates via Facebook Messenger.

April 30th, 2018 6 min read Joseph C Chen
Read Article
サイバー犯罪
Curbing the BEC Problem Using AI and Machine Learning

Due to BEC’s evolving and treacherous nature, run-of-the-mill best practices and security solutions have become weak to withstand attacks. Find out how advanced solutions that utilize artificial intelligence and machine learning help in defending against BEC.

April 16th, 2018 5 min read TrendAI™ Research
Read Article