Skip to main content

トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表

プレスリリースを読む

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

Two Critical PHP Flaws Leaked Before the Patch
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応

10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
エクスプロイトとゼロデイ
eMudhraのCA秘密鍵8件が侵害：何が起き、組織は今何をすべきか

eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
エクスプロイトとゼロデイ
CISOにとって試練の1週間：PHP、eMudhra、そして取締役会から問われること

2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。

2026年10月21日
Sundari Parekh
Read article

ブログ記事を検索

サイバー犯罪
Malware Using Exploits from Shadow Brokers Leak Reportedly in the Wild

Exploits found in the trove of malware recently leaked by hacking group Shadow Brokers are reportedly being used to install ransomware and backdoor. Are your systems protected?

April 26th, 2017 6 min read TrendAI™ Research
Read Article
ランサムウェアと恐喝
Ransomware Recap: Expanding Distribution Methods

This week's recap highlights new distribution methods that make ransomware more unpredictable in terms of how they infect their victims.

April 25th, 2017 4 min read TrendAI™ Research
Read Article
APTサイバー諜報活動
Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

April 25th, 2017 4 min read Feike Hacquebord
Read Article
IoTとスマートデバイス
BrickerBot Malware Emerges, Permanently Bricks IoT Devices

A recently uncovered malware Brickerbot is making the rounds with the capability to permanently brick Internet of Things (IoT) devices. How can it be mitigated?

April 19th, 2017 4 min read TrendAI™ Research
Read Article
エクスプロイトとゼロデイ
Shadow Brokers Leaks Hacking Tools: What it Means for Enterprises

Hacking group Shadow Brokers recently leaked a new trove of information-stealing tools and exploits targeting Windows systems and servers. What does this mean for enterprises?

April 18th, 2017 5 min read TrendAI™ Research
Read Article
IoTとスマートデバイス
Infosec Guide: Dealing with Threats to a Bring Your Own Device (BYOD) Environment

This Infosec Guide will tackle the primary threats organizations face when implementing BYOD programs, as well as best practices and solutions to mitigate these threats.

April 17th, 2017 7 min read TrendAI™ Research
Read Article
標的型攻撃
Operation Cloud Hopper: What You Need to Know

A global cyberespionage campaign has been uncovered compromising managed IT service providers, using them as in-betweens to attack their targets. Here’s what you need to know.

April 10th, 2017 4 min read TrendAI™ Research
Read Article
エクスプロイトとゼロデイ
Apache Struts 2 Vulnerability Leads to RCE

We looked into past several Remote Code Execution (RCE) vulnerabilities reported in Apache Struts, and observed that in most of them, attackers have used Object Graph Navigation Language (OGNL) expressions.

March 9th, 2017 3 min read Suraj Sahu
Read Article
マルウェア
The Michelangelo Virus, 25 Years Later

The Michelangelo virus scare remains a significant turning point for computer security, 25 years after its supposed major impact,

March 6th, 2017 3 min read TrendAI™ Research
Read Article
フィッシングとBEC
Best Practices: Identifying and Mitigating Phishing Attacks

Despite being one of the oldest scams on the internet, phishing continues to be a significant problem for both individuals and organizations. Here are some methods to identify and deal with potential phishing attempts.

February 10th, 2017 7 min read TrendAI™ Research
Read Article