
TrendAI™
セキュリティブログ

注目のブログ

パッチ公開前に情報が流出した2件の重大なPHP脆弱性:組織が今すぐ取るべき対応
10月20日15:20(UTC)、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。
eMudhraのCA秘密鍵8件が侵害:何が起き、組織は今何をすべきか
eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。
CISOにとって試練の1週間:PHP、eMudhra、そして取締役会から問われること
2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。
ブログ記事を検索
Filter by:
Coinhive Miner Emerges as the 6th Most Common Malware
A new report reveals Coinhive's reach after it ranked the coin miner as the 6th most common malware in the world.
Best Practices: Securing Your Mobile Device
The number of mobile phone users around the world is projected to exceed the five billion mark by 2019. Since cybercriminals usually cast wide nets to reach more potential victims, mobile users should protect their devices early on to defend against threats.
Best Practices: How to Secure Your Social Media Accounts
The leading social media platforms have billions of users, and the number keeps getting bigger every year. Learn how to keep your social media accounts secure.
ZNIU: First Android Malware to Exploit Dirty COW
Dirty COW attacks on Android has been silent since its discovery but almost a year later, we captured samples of ZNIU—the first malware family to exploit the vulnerability on the Android platform.
Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores
A spate of new attacks targeting the Android operating system have been discovered using a banking trojan named Red Alert 2.0.
Best Practices: Deploying an Effective Firewall
There is no panacea for building a hacker-proof firewall, but there are things that can be done to streamline its management. These best practices provide a starting point for managing your firewall—so you and your company don’t get burned.
Best Practices: Backing Up Data
In a data-driven world where information is often a company’s most valuable asset, protecting data is more important than it’s ever been.
Best Practices: Securing Sysadmin Tools
Legitimate tools used by IT/system administrators have become valuable cybercriminal targets because of the privilege they provide for greater network access. Here are some best practices for mitigating the abuse of sysadmin tools.
Patching Problems and How to Solve Them
Can we fix the lag between patch releases and actual implementation? Current events reveal that patching should be made a definite priority. We provide a guide on how to manage patching for enterprises and large organizations.
Mobile App Security for Developers
The use of mobile apps is increasing especially among enterprises. More than ever, developers must work harder to improve the security of the apps they create. Here are some best practices.