Skip to main content

TrendAI™
보안 블로그

TrendAI 보안 블로그

추천 블로그

XCSSET Mac Malware: Infects Xcode Projects, Uses 0Days

Further investigation led us to a developer’s Xcode project that contained XCSSET source malware, which leads to a rabbit hole of malicious payloads. Most notable in our investigation is the discovery of two zero-day exploits.

Read Article
Cyber crime
Online Dating Websites Lure Japanese Customers to Scams

We found online dating website scam campaigns primarily targeting Japanese customers for their personal and financial information.

Read Article
Cloud security
Application Security 101

Security issues often arise as a result of applications being rushed for deployment without adequate checks and protections. What are the top security risks to applications and what can organizations do to secure their DevOps pipeline?

Read Article
Cyber crime
Russian Group Cosmic Lynx Launches Over 200 BEC Campaigns

A Russian group dubbed as Cosmic Lynx initiated more than 200 BEC campaigns targeting hundreds of multinational companies.

Read Article
Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted

In this report, we discussed new ransomware family Avaddon, updates on techniques of other ransomware, and our latest figures.

Read Article
Exploits & Zero-Days
Patch Now: F5 Vulnerability with CVSS 10 Severity Score

F5 Networks urges users to patch their BIG-IP networking systems ASAP, after the provider disclosed two vulnerabilities, namely CVE-2020-5902 and CVE-2020-5903.

Read Article
Cyber crime
Malicious Chrome Extensions, Domains Used to Steal User Data

Browser extensions and malicious domains were used in a campaign that aims to track user activity and data.

Read Article
Cloud security
CSO Insights: Liggett Consulting’s Mark Liggett on Connectivity and Visibility in Securing Remote Work

Mark Liggett, CEO of Liggett Consulting and longtime IT and cybersecurity key player, sits down with Trend Micro to share his thoughts on the importance of taking into account connectivity and visibility in securing WFH setups.

Read Article
Exploits & Zero-Days
Millions of IoT Devices Affected by Ripple20 Vulnerabilities

The internet of things (IoT) landscape will be critically affected by the recently discovered Ripple20 vulnerabilities. This group of 19 bugs could potentially hit millions of IoT devices across many different industries.

Read Article
Cyber crime
Updated Analysis on Nefilim Ransomware’s Behavior

Through investigation of recent cases, we have amassed more information on how Nefilim ransomware operates. Some notable updates are the use of other tools and the description of events that occur within the attack phases.

Read Article