2306 matches found
How Cybercriminals Abuse OpenBullet for Credential Stuffing
In this blog, we detail how cybercriminals exploit OpenBullet, a legitimate web-testing software, to brute-force their way into targeted accounts...
5 #TrendTips for Lifecycle Security for Containers
Learn how to manage all of the moving parts when implementing pre-runtime and runtime container security...
Water Pamola Attacked Online Shops Via Malicious Orders
Since 2019, we have been tracking a threat campaign we dubbed as “Water Pamola.” The campaign initially compromised e-commerce online shops in Japan, Australia, and European countries via spam emails with malicious attachments...
Weaponized Deepfakes Are Getting Closer to Reality
The first malicious use of video deepfakes may have been observed, making one of Trend Micro’s long-standing predictions a looming reality...
How Trend Micro Helps Manage Exploited Vulnerabilities
As technological innovations evolve, protecting companies from cyber threats tomorrow secures their businesses today. Read how Trend Micro protects customers from vulnerability exploits by blocking them as early as possible...
DevSecOps: How to Systematize Security into the Dev Pipeline
Security within an organization cannot be siloed or left up for DevOps teams to figure out and manage. Learn how applying DevSecOps best practices will have a noticeable positive impact on the security of your overall applications...
Hello Ransomware Uses Updated China Chopper Web Shell, SharePoint Vulnerability
We discuss the technical features of a Hello ransomware attack, including its exploitation of CVE-2019-0604 and the use of a modified version of the China Chopper web shell...
DevOps Teams can learn from Clubhouse compliance woes
As Clubhouse continues to launch new features and gain popularity, protecting sensitive data and adhering to compliance should be on everyone’s mind...
This Week in Security News - April 23, 2021
XCSSET Quickly Adapts to Macs and Babuk Ransomware Gang Claims Decryptor Repaired...
Tor-Based Botnet Malware Targets Linux Systems, Abuses Cloud Management Tools
We found a botnet malware campaign targeting Linux systems, abusing the Tor network for proxies, and exploiting cloud infrastructure management tools for intrusion...
How to protect serverless and container applications with RASP
With increased demand for container and serverless technology, the need for enhanced security is inevitable. Learn how to secure serverless and container applications using runtime application self-protection RASP...
Trend Micro Encourages Patching Of Old Vulnerability
Trend Micro released several patches last year to address known vulnerabilities. Since that time, an attempt was observed to leverage one of these vulnerabilities in a single unpatched customer system...
The Storybook Approach to MITRE ATT&CK
Read this year’s MITRE Engenuity ATT Evaluations story, which simulates techniques associated with notorious threat groups Carbanak and FIN7 to test solutions' ability to detect and stop APT & Targeted Attacks...
Carbanak and FIN7 Attack Techniques
What happens in Carbanak and FIN7 attacks? Here are some techniques used by these financially motivated threat groups that target banks, retail stores, and other establishments...
How to scan and encrypt objects in S3 buckets
This article explains how to scan objects in S3 buckets against malware and keep your objects encrypted with SSE-KMS...
Could the Microsoft Exchange breach be stopped?
A look at the latest Microsoft zero-day exploits and how Trend Micro could help protect you...
This Week in Security News - April 16, 2021
April Patch Tuesday Sets Record High for 2021 and Fed Warns Cyber Threats Pose Danger to U.S Economy...
XCSSET Quickly Adapts to macOS 11 and M1-based Macs
This latest update details our new research on XCSSET, including the ways in which it has adapted itself to work on both ARM64 and x86x64 Macs...
Cyber-insurers Endorse Cloud Security Platform
With so many vendors in the market, the Marsh initiative has created the Cyber Catalyst to help IT buyers find the right option for them...
Celebrating 3 years of the Cybersecurity Tech Accord
Cybersecurity Tech Accords has grown significantly in the past 3 years, today having 150 signatories across 5 continents, united in the fight against cybercrime...
Could the Microsoft Exchange breach be stopped?
A look at the latest Microsoft zero-day exploits and how Trend Micro could help protect you...
April Patch Tuesday Sets Record High for 2021
April’s Patch Tuesday fixes 114 vulnerabilities in various Microsoft products, a slight increase from March’s 89. This is the most vulnerabilities fixed in a month for 2021 to date, as well as a slight increase from the same month last year...
5 #TrendTips to Implement Application Security
We’ve compiled 5 TrendTips to help you get started with bolstering your application security posture...
HTTPS over HTTP: A Supply Chain Attack on Azure DevOps Server 2020
We provide the technical details of a supply chain attack on an improperly configured Azure DevOps Server 2020, specifically in the continuous integration and continuous delivery CI/CD Pipeline Agent communicating without TLS...
A Spike in BazarCall and IcedID Activity Detected in March
We discuss the cases of BazarCall and IcedID we observed in March. Both are known for the use of spam to deliver their payloads...
Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware
This blog details how Iron Tiger threat actors have updated their toolkit with an updated SysUpdate malware variant that now uses five files in its infection routine instead of the usual three...
This Week in Security News - April 9, 2021
Microsoft Teams and Zoom Hacked In $1 Million Competition and Preventing Ransomware While Working from Home...
4 Steps to Container Lifecycle Security
Containers and Kubernetes have revolutionized developing, deploying, and scaling applications and infrastructure. Learn best practices for security across the container lifecycle, so you can guard your containers against attack...
DevOps Teams Can Prove ISO Compliance with Automation
Learn the ISO standards for security and cloud compliance as well as the automated mechanisms to ensure those standards...
This Week in Security News - April 2, 2021
Alleged Members of Egregor Ransomware Cartel Arrested and Cybercriminals Home in on Manufacturers...
What’s new on AWS Lambda in 2021
This article explores new updates and documentation for AWS Lambda in 2021. Lambda launched several new updates including run container images, cost saving initiatives, and expanded compute capacity...
Going Beyond Built-in Security: Email Threats in 2020
Explore the need for going beyond built-in Microsoft 365 and Google Workspace security based on email threats detected in 2020...
Injecting Deception Mid-Pandemic: Covid-19 Vaccine Related Threats
We share some of our findings on malware, spam, phishing schemes, malicious websites, and illicit markets that use Covid-19 vaccines as a lure...
Protecting LoRaWAN Hardware from Attacks in the Wild
In the last article of our LoRaWAN series, we present dangerous hardware attacks that could affect organizations using this technology. These attacks are particularly worrying because many LoRaWAN devices are deployed in unsecured locations...
This Week in Security News - March 26, 2021
Tracking Conti Ransomware and Swiss Firm Accessed SolarWinds Hacker’s Servers...
Alleged Members of Egregor Ransomware Cartel Arrested
Trend Micro served as one of the cybersecurity partners of law enforcement authorities involved in the investigation...
Cloud Misconfigurations : Avoid Breaches
Check out this infographic on cloud misconfigurations to gain insight on the major causes of misconfigurations, the impacts of those misconfigurations, and tips on how to avoid them so you can continue to build confidently in the cloud...
Maintain File Security during Compliance Scanning
Learn how to integrate security into the build process to protect downstream workflows from risk...
Websites Hosting Cracks Spread Malware, Adware
We investigated pay-per-install PPI websites spreading multiple malware and adware, including CopperStealer and LNKR...
Trend Micro Vision One: Tracking Conti Ransomware
We show how the Trend Micro Vision One platform can be used to track Conti ransomware...
This Week in Security News - March 19, 2021
Joker’s Latest Ploy and NFT Digital Art Is Already Attracting Hackers...
Trend Micro 2020 Annual Cybersecurity Report
Reviewing the most important cybersecurity stories, issues, and trends that occurred over 2020, this annual report aims to equip security leaders with valuable insight and tools so they can focus on both protecting and enabling the organization...
XDR: Up-Leveling Security Integration
A single source of attack telemetry just won’t cut it anymore. See why IDC analyst Michael Suby believes that an XDR platform is a must-have for securing your enterprise...
How CISOs can stay ahead of ransomware attacks
With ransomware threats evolving in 2020, take a look at how you can stay ahead of the curve...
How XDR can enable your enterprise
Extended detection and response XDR provides enhanced visibility, detection, and response across your entire IT infrastructure—enabling you to be more resilient in the face of ever-changing attacks...
Trend Micro + ROS-I: Building a more secure future
Trend Micro joins ROS-I Consortium to help accelerate the secure development of robotic Industry 4.0 applications...
Guardrails to Avoid Cloud Misconfigurations
The stakes and opportunities are higher than ever to ensure that strong operational excellence strategies are implemented. Explore how to help ensure you are holding up your end of the bargain as part of your CSP’s Shared Responsibility Model...
How to Protect Your Downstream Workflows
Learn how to protect your downstream workflows without interruption...