
TrendAI™
보안 블로그

추천 블로그

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
Virtual Patching: Protect Sooner, Before the Patch Lands
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
연구 논문 검색
Filter by:
Over 200,000 MikroTik Routers Compromised in Cryptojacking Campaign
Security researchers uncovered a cryptojacking campaign that exploits a vulnerability in MikroTik routers to inject a malicious version of Coinhive. Here’s what you need to know.
Fileless Malware PowerGhost Targets Corporate Systems
A new fileless malware utilizes Powershell and EternalBlue via WMI for propagation, infecting workstations and servers connected to a local server with a cryptocurrency miner and a DDos tool. Significant infections have been detected in North America and Europ
FBI Report: Global BEC Losses Exceeded US$12 Billion in 2018
The Federal Bureau of Investigation (FBI) issued a public service announcement (PSA) regarding the continued increase of Business Email Compromise (BEC) scams, which total global losses have already reached over US$12 billion in 2018.
Security by Design: A Checklist for Safeguarding Virtual Machines and Containers
Here are some considerations and best practices that developers, IT operations professionals, and system administrators should take into account in securing the infrastructures that power the applications they use.
FacexWorm Abuses Facebook Messenger for Propagation
Our Cyber Safety Solutions team identified a malicious Chrome extension we named FacexWorm, which uses a miscellany of techniques to target cryptocurrency trading platforms accessed on an affected browser and propagates via Facebook Messenger.
Curbing the BEC Problem Using AI and Machine Learning
Due to BEC’s evolving and treacherous nature, run-of-the-mill best practices and security solutions have become weak to withstand attacks. Find out how advanced solutions that utilize artificial intelligence and machine learning help in defending against BEC.
Serverless Applications: What They Mean in DevOps
Analysis of over 1,000 open-source serverless applications revealed that 21% of them have critical vulnerabilities or were misconfigured. What does this mean for DevOps?
Tesla and Jenkins Servers Fall Victim to Cryptominers
Vulnerable enterprise servers are being compromised by individuals or groups looking for resources to mine cryptocurrency. The latest victims are automobile-maker Tesla and users of Jenkins servers.
New AndroRAT Exploits Allow for Permanent Rooting
A new variant of Android Remote Access Tool can inject root exploits to perform malicious tasks such as silent installation, shell command execution, WiFi password collection, and more. It targets CVE-2015-1805, a vulnerability disclosed in 2016.
North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets
In a security alert posted on its website on January 31, The South Korean Computer Emergency Response Team (KR-CERT) warned of a zero-day vulnerability in Adobe Flash player that could be maliciously exploited.