エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日6 min read
TrendAI™ Research
2026年10月28日
6 min read
Read article
TrendAI™
セキュリティブログ
注目のブログ
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応
10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。
2026年10月22日
Read article
エクスプロイトとゼロデイ
eMudhraのCA秘密鍵8件が侵害：何が起き、組織は今何をすべきか
eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。
2026年10月21日
Read article
エクスプロイトとゼロデイ
CISOにとって試練の1週間：PHP、eMudhra、そして取締役会から問われること
2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。
2026年10月21日
Read article
ブログ記事を検索
Site search
Filter by:
フィッシングとBEC
Security 101: Business Process Compromise
Past events show that attackers don't just target people, but processes as well. Enterprises should be aware of the of rising possibility of Business Process Compromises.
February 1st, 2017 6 min read
Read Article
サイバー犯罪
InfoSec Guide: Mitigating Email Threats
Email remains an important communication tool for business organizations. Unfortunately, its widespread use also makes it an ideal platform for cybercrime. Here are some tips for dealing with email-based threats.
January 30th, 2017 7 min read
Read Article
サイバー犯罪
A Rundown of the Biggest Cybersecurity Incidents of 2016
The most notable cybersecurity incidents of the past year, from the biggest data breaches and most expensive attacks to the most persistent attackers and impactful malware.
December 18th, 2016 17 min read
Read Article
サイバー犯罪
Yahoo Discloses 2013 Breach that Exposed Over One Billion Accounts
Yahoo disclosed yet another breach that exposed 1 billion user accounts in August 2013. This comes shortly after it announced a smaller but significant hack last September.
December 15th, 2016 3 min read
Read Article
500 Million Yahoo Users Affected by Data Breach – Password Change Recommended
Yahoo users are prompted to change passwords as a massive breach compromises 500 million accounts.
September 23rd, 2016 3 min read
Read Article
Enterprise Network Protection: Protecting Data through Network Segmentation
An enterprise guide on network segmentation; how it works to secure large enterprise networks, why it's needed, and examples of some of the most widely used network models for different industries.
September 14th, 2016 3 min read
Read Article
RaaS（Ransomware as a Service）
Ransomware-as-a-Service: Ransomware Operators Find Ways to Bring in Business
Cybercriminals are taking cues from legitimate enterprises and focusing on growing their operations. Different variations of ransomware-as-a-service show the evolving nature of the business.
September 2nd, 2016 6 min read
Read Article
サイバー犯罪ランサムウェアと恐喝
Ransomware 101: What, How, and Why
This infographic shows how ransomware has evolved, how big the problem has become, and ways to avoid being a ransomware victim.
June 14th, 2016 3 min read
Read Article
サイバー犯罪フィッシングとBEC
Billion-Dollar Scams: The Numbers Behind Business Email Compromise
Business Email Compromise schemes are one of the biggest threats to companies to date. One carefully crafted email sent to the right person can cost a company millions of dollars. How is it done and what makes it so effective?
June 9th, 2016 6 min read
Read Article
マルウェア
Marcher Android Banking Malware Now Targeting UK Customers
Developers of the Android-based banking trojan Marcher updated the malware, adding major banks in United Kingdom to its list of targets.
June 3rd, 2016 3 min read
Read Article