2315 matches found
New Nokoyawa Ransomware Possibly Related to Hive
In March 2022, we came across evidence that another, relatively unknown, ransomware known as Nokoyawa is likely connected with Hive, as the two families share some striking similarities in their attack chain, from the tools used to the order in which they execute various steps...
New RURansom Wiper Targets Russia
We analyze RURansom, a malware variant discovered to be targeting Russia. Originally suspected to be a ransomware because of its name, analysis reveals RURansom to be a wiper...
Why IaC Security Should Matter to CISOs
Explore how secure infrastructure-as-code IaC enables security leaders to help DevOps teams quickly deliver more business value...
SMS PVA Part 2: Underground Service for Cybercriminals
In part two of this blog entry, we further investigate the innings of smspva.net and discuss the impact and implications of such services...
SMS PVA Services' Use of Infected Android Phones Reveals Flaws in SMS Verification
Certain SMS PVA services allow their customers to create disposable user profiles or register multiple accounts on many popular online platforms. These services can be abused by criminals to conduct fraud or other malicious activities...
Why Cyber Change Outpaces Boardroom Engagement
Organizations must avoid the mistakes of the past and build a security-by-design culture that permeates enterprise-wide...
Why You Need XDR in Today's Threat Landscape
Trend Micro's VP of Threat Intelligence, Jon Clay, explores the latest trends in today's threat landscape and why XDR is key to enabling more resilience...
A Look Into Purple Fox’s Server Infrastructure
By examining Purple Fox’s routines and activities, both with our initial research and the subject matter we cover in this blog post, we hope to help incident responders, security operation centers SOCs, and security researchers find and weed out Purple Fox infections in their network...
New Yanluowang Ransomware Found to be Code-Signed, Terminates Database-Related Processes
We analyzed new samples of the Yanluowang ransomware. One interesting aspect of these samples is that the files are code-signed. They also terminate various processes which are related to database and backup management...
What to do at AWS re:Invent 2021 - Day 3
Welcome to your complete guide to AWS re:Invent 2021 Day 3, where you will find tips on how to get the most out of your conference experience both in Las Vegas and virtually...
Reduce Friction Between IT Leaders and C-suite
As we creep toward a post-pandemic world, organizations need to plan accordingly. Explore Trend Micro’s latest cyber risk research to enable your business to maximize its growth and potential...
Defend Against Cyber Espionage Attacks
Explore Trend Micro’s latest research into Void Balaur, a prolific cybermercenary group, to learn how to defend against attacks launched by this growing group of threat actors...
Application Security 101
Everything DevOps teams need to know about web application security risks and best practices...
QAKBOT Loader Returns With New Techniques and Tools
QAKBOT operators resumed email spam operations towards the end of September after an almost three-month hiatus. QAKBOT detection has become a precursor to many critical and widespread ransomware attacks. Our report shares some insight into the new techniques and tools this threat is using...
Compromised Docker Hub Accounts Abused for Cryptomining Linked to TeamTNT
In October 2021, we observed threat actors targeting poorly configured servers with exposed Docker REST APIs by spinning up containers from images that execute malicious scripts...
This Week in Security News - November 5th, 2021
This week, learn about what the future of cybercrime could potentially look like by the start of the next decade, according to Trend Micro’s Project 2030. Also, read on how a hacker stole $784k in crypto through SIM swaps...
Integrate Cybersecurity Incident Response in DevSecOps
This article examines the need for cross-functional integration and integrated communication between development and security teams to prevent communication dead zones and avoid delays in alerting and remediation...
Do Home Hackers Compromise Business Security?
The most recent Pwn2Own Fall 2021 Pwn2Own Austin includes more IoT entries than ever. This gives us an opportunity to probe today’s largest and newest enterprise attack surface: the home office...
This Week in Security News - October 29, 2021
What to Expect in a Ransomware Negotiation & Cybercriminals Claim to Have Hacked the NRA...
This Week in Security News – October 22, 2021
In this week in security news, learn about a new backdoor from PurpleFox that utilizes WebSockets for more secure communication the link between the Sinclair ransomware attack and the cybercrime group Evil Corp...
CISA Releases Automotive Cybersecurity Guide
The guide helps Transportation System Sector partners understand the cyber-physical risks related to AVs and discusses mitigation strategies they can implement...
Demo: How to Build a Container Registry from a Container
What came first the container or the container registry? Find out and learn how to build, run, and scan your very own container registry from a container itself on your laptop...
Demo: A Guide to Virtual Machine App Security
Enhance your virtual machine VM application security from vulnerabilities in your Spring Framework Java application by reviewing these guidelines...
Security Risks with Private 5G in Manufacturing Companies Part. 1
We can see signs of increased activity in areas of business that use 5G around the world. 5G technology will usher in new personal services through smartphones, and it will also play a large part in industry. The option of Private 5G lets private companies and local governments have their own...
Enhance Network Security for AWS Transit Gateway
Increase security and visibility for lateral and outbound network-loads using the look-aside inspection architecture...
Integrate Serverless Security for Runtime Apps
Serverless solutions are prone to a high degree of application attacks. Learn how to build runtime application self-protection with vulnerability visibility and mitigation capabilities for your serverless applications...
APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs
We have continued tracking APT-C-36, also known as Blind Eagle, since our research on this threat actor in 2019. We share new findings of APT-C-36’s ongoing spam campaign targeting South American entities...
Biden Announces Cybersecurity Initiative Partnership
The announcement marks the US’s extensive collaboration with various private and education sector leaders to address the rising cyber threats in the country...
Auto Apply IPS Rules for Solid Cloud Workload Security
Learn how to leverage automated and programmable APIs to quickly scan and secure workloads with high or critical severity IPS rules...
APT41 Resurfaces as Earth Baku With New Cyberespionage Campaign
Our research paper provides an in-depth analysis of Earth Baku's new cyberespionage campaign, particularly the group's use of advanced malware tools and multiple attack vectors...
Level 4 Autonomous Cars Allowed on German Roads
The country is set to take a pioneering role with its latest autonomous vehicle law, temporarily bridging gaps until more concise international and European legal frameworks are set...
Ulta Beauty CISO discusses compliance challenges
Successful Ulta Beauty CISO, Diane Brown, discusses how cybersecurity leaders can successfully deal with the many compliance, security, and digital transformation challenges of today and the future...
Biden Releases Memo on Critical Cybersecurity Infrastructure Bill
The US president announces the creation of a new cybersecurity initiative, aiming to improve the security of critical infrastructure control systems. New performance goals will also be made, ensuring a consistent baseline for cybersecurity...
3 Major Benefits of Cloud Migration: Automation
Learn more about how automated security controls, policies, and scans can simplify security...
Our vision for a cybersecurity platform
Trend Micro co-founder and CEO Eva Chen discusses our latest vision, strategy, and cybersecurity platform approach at Perspectives 2021...
Threats Ride on the Covid-19 Vaccination Wave
We continue monitoring cybercriminals and threats that abuse the pandemic. In this update, we detail trends in malicious activities and deployments that exploit vaccination developments and processes worldwide...
IT Management Platform Kaseya Hit With Sodinokibi/REvil Ransomware Attack
Kaseya has been hit with a REvil aka Sodinokibi ransomware attack at the dawn of the Fourth of July weekend. The attack was geared toward their on-premises VSA product...
Best Practices for Social Media Security
Social media is a double-edged sword, and as we celebrate SocialMediaDay, let’s remember to use best security practices to keep us safe from malicious actors who abuse the platforms...
The Importance of Being the Leader in Public Vulnerability Research
You can't stop what you don't know about. See how our leadership in vulnerability disclosures can protect you faster...
Fake DarkSide Campaign Targets Energy and Food Sectors
Threat actors behind a recent campaign pose as DarkSide in a bid to deceive targets into paying ransom...
Open source protection that security teams will love
Open source code is the gateway to quick application deployment – see how Trend Micro and Snyk have partnered up to create developer-friendly security for your open source components...
This Week in Security News May 7, 2021
New Panda Stealer Targets Cryptocurrency Wallets and Apple Releases Urgent Security Patches for Zero-Day Bugs...
How Trend Micro Helps Manage Exploited Vulnerabilities
As technological innovations evolve, protecting companies from cyber threats tomorrow secures their businesses today. Read how Trend Micro protects customers from vulnerability exploits by blocking them as early as possible...
The Storybook Approach to MITRE ATT&CK
Read this year’s MITRE Engenuity ATT Evaluations story, which simulates techniques associated with notorious threat groups Carbanak and FIN7 to test solutions' ability to detect and stop APT & Targeted Attacks...
Could the Microsoft Exchange breach be stopped?
A look at the latest Microsoft zero-day exploits and how Trend Micro could help protect you...
What is Docker Content Trust and How do You Secure It?
Can your container image be trusted? Learn how Docker Content Trust DCT employs digital signatures for container image verification and manages trusted collections of content...
Basics of Keeping Kubernetes Clusters Secure Part 2
We outline security mitigations and settings that should be prioritized in a clustered environment. The second part of our security guide on Kubernetes clusters covers best practices related to worker nodes, the kubelet, pods, and audit logs...
This Week in Security News: First Half of 2020 Led to Nearly 800 Disclosed Vulnerabilities and Cisco Jabber Bug Could Let Hackers Target Windows Systems Remotely
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Trend Micro’s midyear roundup report which found that published vulnerabilities in the first half of 2020 grew to 786, compared ...
1H 2020 Cyber Security Defined by Covid-19 Pandemic
When we published our 2020 Predictions report in December, we didn’t realize there was a global pandemic brewing that would give cybercriminals an almost daily news cycle to take advantage of in their attacks against people and organizations around the world. Malicious actors have always taken...