エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日6 min read
TrendAI™ Research
2026年10月28日
6 min read
Read article
TrendAI™
セキュリティブログ
注目のブログ
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応
10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。
2026年10月22日
Read article
エクスプロイトとゼロデイ
eMudhraのCA秘密鍵8件が侵害：何が起き、組織は今何をすべきか
eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。
2026年10月21日
Read article
エクスプロイトとゼロデイ
CISOにとって試練の1週間：PHP、eMudhra、そして取締役会から問われること
2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。
2026年10月21日
Read article
ブログ記事を検索
Site search
Filter by:
サイバー犯罪マルウェア
KOVTER: An Evolving Malware Gone Fileless
KOVTER is one example of a constantly evolving malware. Initially starting out as a police ransomware, it eventually evolved into a much more effective and evasive fileless malware. Here is a closer look at KOVTER, and how organizations can lessen its impact.
August 18th, 2017 4 min read
Read Article
サイバー脅威
Android Backdoor GhostCtrl Records Your Audio, Video
The RETADUP worm that affected Israeli hospitals turned out have bigger impact than we first thought. It was accompanied by an even more dangerous threat: an Android malware that can take over the device. We’ve named this Android backdoor GhostCtrl.
July 17th, 2017 8 min read
Read Article
サイバー犯罪暗号資産
Security 101: The Impact of Cryptocurrency-Mining Malware
As cryptocurrencies like bitcoin are more widely used, so will the threats that cybercriminals use to abuse it. Here’s a closer look at cryptocurrency-mining malware—their emergence in the threat landscape, impact, and some countermeasures against them.
July 5th, 2017 10 min read
Read Article
サイバー犯罪
Frequently Asked Questions: The Petya Ransomware Outbreak
The Petya ransomware family has reemerged, becoming one of the most impactful yet. Is it similar to WannaCry? Does it have a kill switch? Here are some frequently asked questions about the threat.
June 28th, 2017 7 min read
Read Article
APT
The Trail of BlackTech’s Cyber Espionage Campaigns
Following the activities and evolving tactics of cyberespionage group BlackTech helped us uncover the proverbial red string of fate that connected three seemingly disparate campaigns: PLEAD, Shrouded Crossbow, and of late, Waterbear.
June 22nd, 2017 8 min read
Read Article
ランサムウェアと恐喝
Erebus Resurfaces as Linux Ransomware
On June 10, South Korean web hosting company NAYANA was hit by Erebus ransomware (detected by Trend Micro as RANSOM_ELFEREBUS.A), infecting 153 Linux servers and over 3,400 business websites the company hosts.
June 19th, 2017 6 min read
Read Article
Erebus Linux Ransomware: Impact to Servers and Countermeasures
A South Korean web hosting company was hit by a Linux version of the Erebus ransomware. Here’s what you need to know about the threat and what sysadmins can do to defend against it.
June 15th, 2017 5 min read
Read Article
Security 101: The Rise of Fileless Threats that Abuse PowerShell
Filess malware that abuse Windows’ PowerShell are now increasingly becoming more common—from ransomware, click-fraud malware to Trojan downloaders. Here’s a closer look on how to mitigate these threats.
June 1st, 2017 9 min read
Read Article
WannaCry/Wcry Ransomware: How to Defend against It
Here’s what you need to know about this ongoing threat and what you can do to protect against it.
May 13th, 2017 5 min read
Read Article
Persirai: New IoT Botnet Targets IP Cameras
A new IoT botnet called Persirai has been discovered targeting over 1,000 IP Camera models based on various Original Equipment Manufacturer (OEM) products.
May 9th, 2017 5 min read
Read Article