2316 matches found
This Week in Security News - December 10, 2021
This week, read about Trend Micro’s predictions for security in the coming year. Also, learn about the Biden administration’s latest initiatives for curtailing attacks on the transport infrastructure...
COP26 Backs Electric Vehicles to Reduce Climate Change
The 26 United Nations Climate Change Conference pushes for countries of parties to adopt more widespread EV use in order to reduce the looming threats of climate change...
Application Security 101
Everything DevOps teams need to know about web application security risks and best practices...
QAKBOT Loader Returns With New Techniques and Tools
QAKBOT operators resumed email spam operations towards the end of September after an almost three-month hiatus. QAKBOT detection has become a precursor to many critical and widespread ransomware attacks. Our report shares some insight into the new techniques and tools this threat is using...
Void Balaur and the Rise of the Cybermercenary Industry
One of the most prolific cybermercenaries is Void Balaur, a Russian-speaking threat actor group that has launched attacks against different sectors and industries all over the world...
November Continues Streak of Quiet Patch Tuesdays
November continues a recent pattern of relatively peaceful Patch Tuesday cycles. There were only six vulnerabilities rated as Critical this month, with 49 more rated as Important for a total of 55 for the month of November...
Cybersecurity Trends from the Global Pandemic
The past 18 months have presented new technology and challenges at an accelerated pace. The only way to keep up with a continuous demand for new features, running workloads at scale, and ensuring applications are resilient is to stay one step ahead...
Compromised Docker Hub Accounts Abused for Cryptomining Linked to TeamTNT
In October 2021, we observed threat actors targeting poorly configured servers with exposed Docker REST APIs by spinning up containers from images that execute malicious scripts...
Overview: OWASP Top 10 2021
The long-awaited OWASP Top 10 2021 draft edition is here. We take you through the changes, new vulnerabilities, and the triggers, enabling you to secure your apps against the latest threats...
This Week in Security News - October 29, 2021
What to Expect in a Ransomware Negotiation & Cybercriminals Claim to Have Hacked the NRA...
Private 5G Security Risks in Manufacturing Part 3
We can see signs of increased activity in areas of business that use 5G around the world. 5G technology will usher in new personal services through smartphones, and it will also play a large part in industry...
CISA Releases Automotive Cybersecurity Guide
The guide helps Transportation System Sector partners understand the cyber-physical risks related to AVs and discusses mitigation strategies they can implement...
New Bill to Require Cyber Attack Reporting in the US
The Cyber Incident Notification Act of 2021 would also require CISA to launch a program that would notify organizations of various vectors that malicious actors exploit...
New Bill to Require Cyber Attack Reporting in the US
The Cyber Incident Notification Act of 2021 would also require CISA to launch a program that would notify organizations of various vectors that malicious actors exploit...
Honda to Start Selling Smart Car Data
The auto giant is just one of many auto companies monetizing smart car data, creating a new industry set to be worth $400 billion by 2030...
What are Open Source Software License Risks?
Explore the risks of using open source licenses and what tools to use to mitigate risks for safer, more legally compliant applications...
Analyzing SSL/TLS Certificates Used by Malware
We take a closer look at the SSL/TLS certificates used by malware...
New Campaign Sees LokiBot Delivered Via Multiple Methods
We recently detected an aggressive malware distribution campaign delivering LokiBot via multiple techniques, including the exploitation of older vulnerabilities...
Micro Frontend Guide: Technical Integrations
In this article, we will take a closer look at the technical considerations for developing web applications with a Micro Frontend...
Level 4 Autonomous Cars Allowed on German Roads
The country is set to take a pioneering role with its latest autonomous vehicle law, temporarily bridging gaps until more concise international and European legal frameworks are set...
Biden Releases Memo on Critical Cybersecurity Infrastructure Bill
The US president announces the creation of a new cybersecurity initiative, aiming to improve the security of critical infrastructure control systems. New performance goals will also be made, ensuring a consistent baseline for cybersecurity...
3 Major Benefits of Cloud Migration: Automation
Learn more about how automated security controls, policies, and scans can simplify security...
Cybercrime: Today and the Future
Trend Micro Research experts Erin Sindelar and Rik Ferguson use current trends and data to paint a picture of cybercrime in 2021 and shine a light on what it could look like in 2030...
With 5G coming, it’s time to plug security gaps
With 5G introducing new risks, many are finding they don’t have the visibility, tooling or resources to manage such networks securely...
July Patch Tuesday: DNS Server, Exchange Server Vulnerabilities Cause Problems
After two relatively quiet months, July has proven to be another busy month for Microsoft security bulletins. A total of 117 bulletins were issued for various security vulnerabilities fixed in the July Patch Tuesday cycle...
Why SecOps Need A Cybersecurity Platform
Our global study polled more than 2,300 IT security decision makers to discover how to best assist and support SecOps teams so you can be more resilient...
XDR Security : More Security. More Savings.
You don’t have to sacrifice security for savings. Discover the business, security, and financial benefits of the XDR capabilities of Trend Micro Vision One in the ESG Economic Validation report...
Software composition analysis 101
Open source is everywhere. Learn how software composition analysis can automate open source management to secure your applications...
Still Leading In Endpoint And Cloud Workload Security
Cloud workload security and endpoint protection are key to managing security risk. Two new independent IDC reports help CISOs consider their strategic partner options...
NIST Guidelines for Containerized Application Security
Learn how to secure containers and protect against breaches...
This Week in Security News June 18, 2021
Bash ransomware targets Linux Distributions and Trend Micro touts zero trust risk insights...
Bash Ransomware DarkRadiation Targets Red Hat- and Debian-based Linux Distributions
We investigate how certain hacking tools are used to move laterally on victims’ networks to deploy ransomware. These tools contain reconnaissance/spreader scripts, exploits for Red Hat and CentOS, binary injectors, and more. In this blog, we focus on analyzing the worm and ransomware script...
Increase visibility for on-premise and cloud workloads
Ensure each of your cloud workloads are properly managed, protected, and patched - without the slow down...
The U.S. EO on Ransomware: What Does it Mean? – Part 2
The White House is urging companies to do more to stem the tide of ransomware attacks now that they are starting to impact critical infrastructure and supply chains. It is a good start, but what will be the implication of this to U.S. businesses?...
Looking Ahead: The Post-Pandemic Security Landscape
One year into the pandemic, our team at Trend Micro discussed the lasting impact that Covid-19 will have on people’s way of life and what a post-pandemic “new normal” might look like...
This Week in Security News June 4, 2021
Cyberattack hits JBS meat works in Australia, North America and DarkSide Targets Virtual Machines...
TeamTNT’s Extended Credential Harvester Targets Cloud Services, Other Software
We found new evidence that the cybercriminal group TeamTNT has extended its credential harvesting capabilities to include multiple cloud and non-cloud services...
Container Security First Steps: Image and Registry Scanning
Learn to secure your containers with image and registry scanning. This article explores key container vulnerabilities, and how to guard against them with cloud security tools like policy-based deployment control...
This Week in Security News May 14, 2021
May Patch Tuesday Offers Relative Respite and What We Know About DarkSide Ransomware and the US Pipeline Attack...
DevOps Teams can meet NIST compliance standards with automation
Meet business compliance needs without interrupting your workflow...
Open source protection that security teams will love
Open source code is the gateway to quick application deployment – see how Trend Micro and Snyk have partnered up to create developer-friendly security for your open source components...
This Week in Security News - April 30, 2021
Hacktivism’s reemergence explained and Hello ransomware uses updated China Chopper web shell...
5 #TrendTips for Lifecycle Security for Containers
Learn how to manage all of the moving parts when implementing pre-runtime and runtime container security...
How Trend Micro Helps Manage Exploited Vulnerabilities
As technological innovations evolve, protecting companies from cyber threats tomorrow secures their businesses today. Read how Trend Micro protects customers from vulnerability exploits by blocking them as early as possible...
How to protect serverless and container applications with RASP
With increased demand for container and serverless technology, the need for enhanced security is inevitable. Learn how to secure serverless and container applications using runtime application self-protection RASP...
Injecting Deception Mid-Pandemic: Covid-19 Vaccine Related Threats
We share some of our findings on malware, spam, phishing schemes, malicious websites, and illicit markets that use Covid-19 vaccines as a lure...
Cloud Misconfigurations : Avoid Breaches
Check out this infographic on cloud misconfigurations to gain insight on the major causes of misconfigurations, the impacts of those misconfigurations, and tips on how to avoid them so you can continue to build confidently in the cloud...
Trend Micro Vision One: Tracking Conti Ransomware
We show how the Trend Micro Vision One platform can be used to track Conti ransomware...
How CISOs can stay ahead of ransomware attacks
With ransomware threats evolving in 2020, take a look at how you can stay ahead of the curve...
Leveraging the Cost Optimization Pillar for Well-Architected Environments
In this article, we will explore the Cost Optimization pillar of the AWS Well-Architected Framework, examining best practices for designing processes that make it possible to go to market and optimize costs early on...