Skip to main content

トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表

プレスリリースを読む

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

Two Critical PHP Flaws Leaked Before the Patch
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応

10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
エクスプロイトとゼロデイ
eMudhraのCA秘密鍵8件が侵害：何が起き、組織は今何をすべきか

eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
エクスプロイトとゼロデイ
CISOにとって試練の1週間：PHP、eMudhra、そして取締役会から問われること

2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。

2026年10月21日
Sundari Parekh
Read article

ブログ記事を検索

フィッシングとBEC
Austrian Aeronautics Company Loses Over €42 Million to BEC Scam

Austria-based Fischer Advanced Composite Components AG (FACC), a major designer and manufacturer of aircraft components and systems, falls prey to a business email compromise (BEC) scheme that cost the company over 42 million euros in losses.

May 26th, 2016 3 min read TrendAI™ Research
Read Article
サイバー犯罪
Keeping Digital Assets Safe: The Need for Data Classification

This primer discusses the importance of data classification, and how organizations can implement these strategies to reduce the effects should a data breach occur.

May 20th, 2016 2 min read TrendAI™ Research
Read Article
サイバー犯罪アンダーグラウンド
2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M

Long time users of Linkedin users may very well need to change their passwords once more as a cybercriminal puts the email addresses and passwords of 117 million users up for sale.

May 18th, 2016 2 min read TrendAI™ Research
Read Article
ランサムウェアと恐喝
CryptXXX, 7ev3n Ransomware Get Major Updates

Newly-discovered ransomware strains, CryptXXX and 7ev3n, get major updates from malware authors.

May 11th, 2016 5 min read TrendAI™ Research
Read Article
ランサムウェアと恐喝
Reveton Ransomware Descendant, CryptXXX Discovered

A new ransomware strain, CryptXXX, was recently discovered making its rounds since the tail-end of March.

April 20th, 2016 4 min read TrendAI™ Research
Read Article
Locky Ransomware Strain Led Kentucky Hospital to an “Internal State of Emergency”

Kentucky-based Methodist Hospital announced a ransomware attack that led to an “internal state of emergency.”

March 24th, 2016 4 min read TrendAI™ Research
Read Article
The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP

Top news sites, entertainment portals, and political commentary sites were affected by a massive malvertising campaign related to the Angler Exploit Kit.

March 16th, 2016 3 min read TrendAI™ Research
Read Article
ランサムウェアと恐喝
New Crypto-Ransomware Locky Uses Malicious Word Macros

A new crypto-ransomware type called Locky has been discovered riding on document-based macros and using infection techniques borrowed from the notorious banking malware DRIDEX.

February 19th, 2016 3 min read TrendAI™ Research
Read Article
サイバー犯罪
Frequently Asked Questions: BlackEnergy

What we know about BlackEnergy, a Trojan known to have been used in attacks on Ukraine power providers that caused a massive outage in late 2015.

February 11th, 2016 2 min read TrendAI™ Research
Read Article
フィッシングとBEC
Security 101: Business Email Compromise (BEC) Schemes

The Federal Bureau of Investigation (FBI) released a public service announcement earlier this year warning about Business Email Compromise (BEC) schemes. Here’s what you need to know, and what you can do to prevent attacks.

January 11th, 2016 8 min read TrendAI™ Research
Read Article