2315 matches found
Why XDR security in today's threat landscape
Trend Micro's VP of Threat Intelligence, Jon Clay, explores the latest trends in today's threat landscape and why XDR is key to enabling more resilience...
This Week in Security News - December 10, 2021
This week, read about Trend Micro’s predictions for security in the coming year. Also, learn about the Biden administration’s latest initiatives for curtailing attacks on the transport infrastructure...
The Evolution of IoT Linux Malware Based on MITRE ATT&CK TTPs
In our study, we relied on the tactics, techniques, and procedures of MITRE ATT&CK to define the malware capabilities and characteristics of IoT Linux malware. We describe our findings and how IoT malware has been evolving...
Discovering the Exploitable Security Gaps in Remote Work Spaces
Unprotected smart devices that populate home offices are seen as low-hanging fruit by cybercriminals. These machines can be compromised and used in criminal campaigns or leveraged to gain deeper access to home networks...
Does Home IoT Compromise Enterprise Security?
The most recent Pwn2Own Fall 2021 Pwn2Own Austin includes more IoT entries than ever. This gives us an opportunity to probe today’s largest and newest enterprise attack surface: the home office...
Ransomware Negotiation Scenarios: What to Expect
We wanted to get a better understanding of what victims go through during the aftermath and recovery process of a ransomware attack to help others in case they find themselves in a similar situation. To do this, we analyzed victim support chats for five ransomware families...
Ransomware Negotiation Scenarios: What to Expect
We wanted to get a better understanding of what victims go through during the aftermath and recovery process of a ransomware attack to help others in case they find themselves in a similar situation. To do this, we analyzed victim support chats for five ransomware families...
Security Risks with Private 5G Networks in Manufacturing Part. 3
We can see signs of increased activity in areas of business that use 5G around the world. 5G technology will usher in new personal services through smartphones, and it will also play a large part in industry. The option of Private 5G lets private companies and local governments have their own...
Cybersecurity Trends & Predictions for CISOs
Jon Clay, VP of threat research at Trend Micro, predicts cybersecurity attacks CISOs need to prepare for...
What To Expect in a Ransomware Negotiation
We wanted to get a better understanding of what victims go through during the aftermath and recovery process of a ransomware attack to help others in case they find themselves in a similar situation. To do this, we analyzed victim support chats for five ransomware families...
India Releases Cybersecurity Guidelines for Power Sector
A first in the sector, the latest scheme aims to enhance cybersecurity readiness and the overall efficiency of the country’s distribution companies...
Private 5G Security Risks in Manufacturing Part 2
We can see signs of increased activity in areas of business that use 5G around the world. 5G technology will usher in new personal services through smartphones, and it will also play a large part in industry...
Analyzing Email Services Abused for Business Email Compromise
We analyzed five major types of email channels, and the techniques in keywords and domain names BEC actors use to appear legitimate to potential victims...
October Patch Tuesday: 3 Critical Bulletins Among 71
The October Patch Tuesday maintains the relatively peaceful streak from previous months with only 3 bulletins rated as Critical among 71 new vulnerabilities...
New Bill to Require Cyber Attack Reporting in the US
The Cyber Incident Notification Act of 2021 would also require CISA to launch a program that would notify organizations of various vectors that malicious actors exploit...
Minimize SecOps Risk with Less Tools and More Security
Security leaders are seeking new ways to minimize SecOps security monitoring tools while increasing efficiency for SecOps teams. Read this article to learn more...
How Quantum Computers Can Impact Security
While it might be too early to completely overhaul security protocols to prepare for quantum computing — not to mention that there is currently no post-quantum cryptographic standard existing at the moment — it would be a good idea for organizations to start planning for the future...
Honda to Start Selling Smart Car Data
The auto giant is just one of many auto companies monetizing smart car data, creating a new industry set to be worth $400 billion by 2030...
Expanded Cloud Misconfiguration & IaaS Security
Cloud One – Conformity has expanded its support for multi-clouds and Terraform users to add even more configuration checks so cloud projects are built on a foundation of best practice security and compliance...
Honda to Start Selling Smart Car Data
The auto giant is just one of many auto companies monetizing smart car data, creating a new industry set to be worth $400 billion by 2030...
CISA, NIST Says Use Cybersecurity Control Systems
The agencies conducted a crosswalk of existing cybersecurity documents and identified nine categories to be used as the foundation for preliminary control systems cybersecurity performance goals...
This Week in Security News – October 1, 2021
Welcome to our weekly roundup, where we share what you need to know about cybersecurity news and events that happened over the past few days. This week, learn about Zloader, a notable recent ZBOT variant. Also, read on a recently introduced bill that would mandate ransom payment reporting...
Mac Users Targeted by Trojanized iTerm2 App
We go into more detail about a fake version of the iTerm2 app that downloads and runs malware, detected by Trend Micro as TrojanSpy.Python.ZURU.A, which collects private data from a victim’s machine...
A Kubernetes Pod Security Policy Alternative
A quick look at the deprecation of Kubernetes Pod Security Policy and how to ensure your clusters are protected going forward...
Securing AWS Infrastructure with Trend Micro Workshop
In this workshop, you’ll learn how to leverage infrastructure as code IaC and Security to automate your cloud security efforts. If you’re interested in making cloud security more efficient, automated, proactive, and accessible, this workshop is for you!...
September Patch Tuesday: 66 Bulletins, Only 3 Critical
The September 2021 Patch Tuesday cycle is relatively good news for system administrators with only 66 total bulletins. Perhaps more significantly, only three of these were Critical bulletins...
Micro Frontend Guide: Overview
How can you get the most out of your web applications? Explore why Micro Frontend is ideal for evolving organizations...
AWS Marketplace Talks Secure Digital Transformation
Spurred on by the pandemic, digital transformation continues to accelerate. Chris Grusz, director of AWS Marketplace and Control Tower, discusses how security teams can leverage this transformation to securely innovate and drive better business outcomes...
Respect in Security: Anti-Harrassment Initiative
Respect in Security aims to make a concrete difference to the levels of abuse and harassment that are unfortunately all too common in our industry...
Reduce Instances of Covid-19 Phishing Email Attacks
The Covid-19 pandemic has created an unlimited supply of news and topics for cybercriminals to utilize in their attacks, as well as major organizations to spoof. Learn what your organization can do to combat these timely threats...
How to navigate open source licensing risks
Vulnerabilities aren't the only risk that comes with open source software use. Learn how you can best mitigate licensing risks to ensure your team is meeting all legal requirements while building with open source code...
This Week in Security News July 2, 2021
Nefilim ransomware attack through a MITRE Att lens and PoC exploit circulating for critical Windows Print Spooler bug, and more...
#LetsTalkSecurity: Adapt or Die
Let's Talk Security: Season 02 // Episode 02: Host, Rik Ferguson, interviews Forrester Analyst, Allie Mellen. Together they discuss to adapt or die...
Cloud-Native Security: More Security Observability
Explore observability vs. visibility, how they differ, how they are intertwined, and why they should be incorporated into your security strategy...
This Week in Security News June 18, 2021
Bash ransomware targets Linux Distributions and Trend Micro touts zero trust risk insights...
Bash Ransomware DarkRadiation Targets Red Hat- and Debian-based Linux Distributions
We investigate how certain hacking tools are used to move laterally on victims’ networks to deploy ransomware. These tools contain reconnaissance/spreader scripts, exploits for Red Hat and CentOS, binary injectors, and more. In this blog, we focus on analyzing the worm and ransomware script...
An Expert Discussion on Zero Trust
Zero Trust is the key strategy moving forward to secure the always changing hybrid workplace. Listen in as two of our industry experts discuss how risk insights are key component of Zero Trust security...
5 #TrendTips To Build Better in the Cloud
You have multiple cloud service provider accounts and you want to make sure that you are deploying everything in a well-architected fashion to avoid future security headaches. Here's where to begin...
Network Policies to Help Reduce Risk and Improve Security
Cloud workloads frequently require internet access, and as we know, anything accessing the internet can be breached. This article explores simple tactics such as access level restriction and overlaying threat intelligence to enhance your security posture...
ZDI Tops Omdia Vulnerability Disclosures Again
The Trend Micro Zero Day Initiative ZDI again dominated the number of disclosed vulnerabilities for the 13th year in a row based on Omdia’s research into the vulnerability disclosure market. Read More...
Stop Ransomware Groups Who Weaponize Legitimate Tools
The ongoing game of cat and mouse – cybercriminals vs security teams – continues with the latest evolution in ransomware...
What We Know About the DarkSide Ransomware and the US Pipeline Attack
Trend Micro Research found dozens of DarkSide ransomware samples in the wild and investigated how the ransomware group operates and what organizations it typically targets...
Weaponized Deepfakes Are Getting Closer to Reality
The first malicious use of video deepfakes may have been observed, making one of Trend Micro’s long-standing predictions a looming reality...
Tor-Based Botnet Malware Targets Linux Systems, Abuses Cloud Management Tools
We found a botnet malware campaign targeting Linux systems, abusing the Tor network for proxies, and exploiting cloud infrastructure management tools for intrusion...
Could the Microsoft Exchange breach be stopped?
A look at the latest Microsoft zero-day exploits and how Trend Micro could help protect you...
5 #TrendTips to Implement Application Security
We’ve compiled 5 TrendTips to help you get started with bolstering your application security posture...
This Week in Security News - April 2, 2021
Alleged Members of Egregor Ransomware Cartel Arrested and Cybercriminals Home in on Manufacturers...
What’s new on AWS Lambda in 2021
This article explores new updates and documentation for AWS Lambda in 2021. Lambda launched several new updates including run container images, cost saving initiatives, and expanded compute capacity...