US - Research, News, and Perspectives http://feed.informer.com/digests/G5HRN3DTV4/feeder US - Research, News, and Perspectives Respective post owners and feed distributors Tue, 09 Nov 2021 16:45:03 +0000 Feed Informer http://feed.informer.com/ Spot the Difference: Earth Kasha's New LODEINFO Campaign And The Correlation Analysis With The APT10 Umbrella https://www.trendmicro.com/en_us/research/24/k/lodeinfo-campaign-of-earth-kasha.html Research, News, and Perspective urn:uuid:25548714-aaa2-d531-a4bc-cf505751165b Tue, 19 Nov 2024 00:00:00 +0000 LODEINFO is a malware used in attacks targeting mainly Japan since 2019. Trend Micro has been tracking the group as Earth Kasha. We have identified a new campaign connected to this group with significant updates to their strategy, tactics, and arsenals. Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Endpoints Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Hara Hiroaki Inside Water Barghest’s Rapid Exploit-to-Market Strategy for IoT Devices https://www.trendmicro.com/en_us/research/24/k/water-barghest.html Research, News, and Perspective urn:uuid:03389c34-df1d-28eb-b167-ec6bc11f7c51 Mon, 18 Nov 2024 00:00:00 +0000 In this blog entry, we discuss Water Barghest's exploitation of IoT devices, transforming them into profitable assets through advanced automation and monetization techniques. Trend Micro Research : Articles, News, Reports Trend Micro Research : Threats Trend Micro Research : IoT Feike Hacquebord 5 AI Security Takeaways featuring Forrester https://www.trendmicro.com/en_us/research/24/j/forrester-ai-security.html Research, News, and Perspective urn:uuid:f35d0f94-6a43-d9e4-68c0-3e9983879245 Wed, 13 Nov 2024 00:00:00 +0000 Highlights from the recent discussion between Trend Micro’s David Roth, CRO Enterprise America, and guest speaker Jeff Pollard, VP, Principal Analyst, Forrester about AI hype versus reality and how to secure AI in the workplace. Trend Micro Research : Cyber Crime Trend Micro Research : Web Trend Micro Research : Cyber Threats Trend Micro Research : Endpoints Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Video Trend Micro Research : Network Trend Micro Research : Security Strategies Trend Micro and Japanese Partners Reveal Hidden Connections Among SEO Malware Operations https://www.trendmicro.com/en_us/research/24/k/seo-malware.html Research, News, and Perspective urn:uuid:884a37d8-b7ca-88ff-6f03-1fb493fd72fc Mon, 11 Nov 2024 00:00:00 +0000 Trend Micro researchers, in collaboration with Japanese authorities, analyzed links between SEO malware families used in SEO poisoning attacks that lead users to fake shopping sites. Trend Micro Research : Latest News Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Makoto Shimamura Breaking Down Earth Estries' Persistent TTPs in Prolonged Cyber Operations https://www.trendmicro.com/en_us/research/24/k/breaking-down-earth-estries-persistent-ttps-in-prolonged-cyber-o.html Research, News, and Perspective urn:uuid:af1eafb5-cda0-7f9a-5e6d-f97a0ec28008 Fri, 08 Nov 2024 00:00:00 +0000 Discover how Earth Estries employs a diverse set of tactics, techniques, and tools, including malware such as Zingdoor and Snappybee, for its campaigns. Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Endpoints Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Ted Lee SOC Around the Clock: World Tour Survey Findings https://www.trendmicro.com/en_us/research/24/k/world-tour-survey-results.html Research, News, and Perspective urn:uuid:10b943f8-9051-4487-c9b5-be7eb9a15758 Mon, 04 Nov 2024 00:00:00 +0000 Trend surveyed 750 cybersecurity professionals in 49 countries to learn more about the state of cybersecurity, from job pressures to the need for more advanced tools. Explore what SOC teams had to say. Trend Micro Research : Cyber Crime Trend Micro Research : Web Trend Micro Research : Research Trend Micro Research : Cyber Threats Trend Micro Research : Compliance & Risks Trend Micro Research : Endpoints Trend Micro Research : Network Trend Micro Research : Articles, News, Reports AI Pulse: Election Deepfakes, Disasters, Scams & more https://www.trendmicro.com/en_us/research/24/j/ai-election-deepfakes.html Research, News, and Perspective urn:uuid:4dc03d90-284f-017a-ac09-fac067859e5e Thu, 31 Oct 2024 00:00:00 +0000 In the final weeks before November’s U.S. election, cybersecurity experts were calling October 2024 the “month of mischief”—a magnet for bad actors looking to disrupt the democratic process through AI-generated misinformation. This issue of AI Pulse looks at what can be done about deepfakes and other AI scams, and why defense-in-depth is the only way to go. Trend Micro Research : Cyber Crime Trend Micro Research : Web Trend Micro Research : Social Media Trend Micro Research : Expert Perspective Trend Micro Research : Cyber Threats Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Mobile Trend Micro Research : Articles, News, Reports AI Team Attacker Abuses Victim Resources to Reap Rewards from Titan Network https://www.trendmicro.com/en_us/research/24/j/titan-network.html Research, News, and Perspective urn:uuid:8edc3119-2f51-38e1-b313-3da653f550c9 Wed, 30 Oct 2024 00:00:00 +0000 In this blog entry, we discuss how an attacker took advantage of the Atlassian Confluence vulnerability CVE-2023-22527 to connect servers to the Titan Network for cryptomining purposes. Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Trend Micro Research : Cyber Threats Ranga Duraisamy Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis https://www.trendmicro.com/en_us/research/24/j/understanding-the-initial-stages-of-web-shell-and-vpn-threats-an.html Research, News, and Perspective urn:uuid:8825e60f-210b-f30c-06b8-971e0d1a4f46 Thu, 24 Oct 2024 00:00:00 +0000 While cyberattacks that employ web shells and VPN compromise are not particularly novel, they are still prevalent. The recent incidents that Trend Micro MXDR analyzed highlight the importance of behavioral analysis and anomaly detection in security measures. Trend Micro Research : Endpoints Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Ryan Maglaque Unmasking Prometei: A Deep Dive Into Our MXDR Findings https://www.trendmicro.com/en_us/research/24/j/unmasking-prometei-a-deep-dive-into-our-mxdr-findings.html Research, News, and Perspective urn:uuid:411acf7b-ecec-eaea-c071-9730dafb519a Wed, 23 Oct 2024 00:00:00 +0000 How does Prometei insidiously operate in a compromised system? This Managed Extended Detection and Response investigation conducted with the help of Trend Vision One provides a comprehensive analysis of the inner workings of this botnet so users can stop the threat in its tracks before it inflicts damage to the system. Trend Micro Research : Endpoints Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Buddy Tancio Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach https://www.trendmicro.com/en_us/research/24/j/using-grpc-http-2-for-cryptominer-deployment.html Research, News, and Perspective urn:uuid:c8c5f712-a362-e7a1-0574-c3396854d0dd Tue, 22 Oct 2024 00:00:00 +0000 In this blog entry, we discuss how malicious actors are exploiting Docker remote API servers via gRPC/h2c to deploy the cryptominer SRBMiner to facilitate their mining of XRP on Docker hosts. Trend Micro Research : Latest News Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Abdelrahman Esmail Attackers Target Exposed Docker Remote API Servers With perfctl Malware https://www.trendmicro.com/en_us/research/24/j/attackers-target-exposed-docker-remote-api-servers-with-perfctl-.html Research, News, and Perspective urn:uuid:4e46276f-3fff-7942-cad5-52b9ccf82194 Mon, 21 Oct 2024 00:00:00 +0000 We observed an unknown threat actor abusing exposed Docker remote API servers to deploy the perfctl malware. Trend Micro Research : Cloud Trend Micro Research : Malware Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Sunil Bharti Gartner 2024 CNAPP Market Guide Insights for Leaders https://www.trendmicro.com/en_us/research/24/j/gartner-2024-cnapp-market-guide.html Research, News, and Perspective urn:uuid:e3e8ad5e-3d59-e8b8-abd8-9037029efa81 Fri, 18 Oct 2024 00:00:00 +0000 As businesses increasingly pivot to cloud-native applications, the landscape of cybersecurity becomes ever more challenging. Trend Micro Research : Cloud Trend Micro Research : Compliance & Risks Trend Micro Research : Reports Trend Micro Research : Privacy & Risks Trend Micro Research : Articles, News, Reports How to Mitigate the Impact of Rogue AI Risks https://www.trendmicro.com/en_us/research/24/j/mitigate-rogue-ai-risks.html Research, News, and Perspective urn:uuid:d1387812-8ed6-a7f4-ba17-6d867ccb4f92 Thu, 17 Oct 2024 00:00:00 +0000 This is the latest blog in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights. Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Expert Perspective Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats AI Team Fake LockBit, Real Damage: Ransomware Samples Abuse Amazon S3 to Steal Data https://www.trendmicro.com/en_us/research/24/j/fake-lockbit-real-damage-ransomware-samples-abuse-aws-s3-to-stea.html Research, News, and Perspective urn:uuid:8949ce10-4ab1-cc55-923b-3464cd19ada3 Wed, 16 Oct 2024 00:00:00 +0000 This article uncovers a Golang ransomware abusing Amazon S3 for data theft, and masking as LockBit to further pressure victims. The discovery of hard-coded AWS credentials in these samples led to AWS account suspensions. Trend Micro Research : Cloud Trend Micro Research : Ransomware Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Jaromir Horejsi Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions https://www.trendmicro.com/en_us/research/24/j/edrsilencer-disrupting-endpoint-security-solutions.html Research, News, and Perspective urn:uuid:1be85902-d0e9-109f-09ba-a6ddef18598b Tue, 15 Oct 2024 00:00:00 +0000 Trend Micro's Threat Hunting Team has observed EDRSilencer, a red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity. Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Trend Micro Research : Research Jacob Santos Water Makara Uses Obfuscated JavaScript in Spear Phishing Campaign, Targets Brazil With Astaroth Malware https://www.trendmicro.com/en_us/research/24/j/water-makara-uses-obfuscated-javascript-in-spear-phishing-campai.html Research, News, and Perspective urn:uuid:70d0c294-6cbf-357c-2f72-aa0d1b449844 Mon, 14 Oct 2024 00:00:00 +0000 Trend Micro researchers have uncovered a surge of malicious activities involving a threat actor group that we track as Water Makara. This group is targeting enterprises in Brazil, deploying banking malware using obfuscated JavaScript to slip past security defenses. Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Endpoints Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Charles Adrian Marty Earth Simnavaz (aka APT34) Levies Advanced Cyberattacks Against Middle East https://www.trendmicro.com/en_us/research/24/j/earth-simnavaz-cyberattacks.html Research, News, and Perspective urn:uuid:91f88f28-9e9c-cd4f-ce12-bde1ef5ee214 Fri, 11 Oct 2024 00:00:00 +0000 Trend Micro's investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to sectors in the Middle East. Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Mohamed Fahmy Harnessing AI for Enhanced Security https://www.trendmicro.com/en_us/research/24/j/enhanced-security-ai.html Research, News, and Perspective urn:uuid:138074db-0a05-a0f5-0e37-bcf05509a19a Tue, 08 Oct 2024 00:00:00 +0000 A deep-dive into how AI-driven solutions from Trend Micro leveraging the NVIDIA AI Enterprise software platform are elevating security across critical industries Trend Micro Research : Cloud Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Expert Perspective Trend Micro Research : Cyber Threats Trend Micro Research : Data center Fernando Cardoso Rogue AI: What the Security Community is Missing https://www.trendmicro.com/en_us/research/24/j/rogue-ai-part-4.html Research, News, and Perspective urn:uuid:d6e79b22-6478-3b4a-bc18-daefd14868ce Thu, 03 Oct 2024 00:00:00 +0000 This is the fourth blog post in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights. Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Expert Perspective Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats AI Team MDR in Action: Preventing The More_eggs Backdoor From Hatching https://www.trendmicro.com/en_us/research/24/i/mdr-in-action--preventing-the-moreeggs-backdoor-from-hatching--.html Research, News, and Perspective urn:uuid:9bfb3796-2ba1-56df-f461-fd61c7b35372 Mon, 30 Sep 2024 00:00:00 +0000 Trend Micro MDR (Managed Detection and Response) team promptly mitigated a more_eggs infection. Using Vision One, MDR illustrated how Custom Filters/Models and Security Playbook can be used to automate the response to more_eggs and similar threats. Trend Micro Research : Phishing Trend Micro Research : Malware Trend Micro Research : Articles, News, Reports Ryan Soliven AI Pulse: What's new in AI regulations? https://www.trendmicro.com/en_us/research/24/i/ai-regulations-2024.html Research, News, and Perspective urn:uuid:a5118c4c-5008-28a9-9c17-696b4e75640b Mon, 30 Sep 2024 00:00:00 +0000 Fall is in the air and frameworks for mitigating AI risk are dropping like leaves onto policymakers’ desks. From California’s SB 1047 bill and NIST’s model-testing deal with OpenAI and Anthropic to REAIM’s blueprint for military AI governance, AI regulation is proving to be a hot and complicated topic. Trend Micro Research : Cloud Trend Micro Research : Latest News Trend Micro Research : Cyber Crime Trend Micro Research : Web Trend Micro Research : Cyber Threats Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Network Trend Micro Research : Articles, News, Reports AI Team Trend Detects NVIDIA AI Toolkit Vulnerability https://www.trendmicro.com/en_us/research/24/i/nvidia-ai-container-toolkit-vulnerability-fix.html Research, News, and Perspective urn:uuid:d549be3f-8101-61ff-a13c-f13a01e5d87e Fri, 27 Sep 2024 00:00:00 +0000 On Wednesday, NVIDIA released updates to fix a critical vulnerability in its NVIDIA Container Toolkit, which, if exploited, could put a wide range of AI infrastructure and underlying data/secrets at risk. Trend Micro Research : Cyber Crime Trend Micro Research : Exploits & Vulnerabilities Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Trend Micro Research : Data center Cybersecurity Compass: Bridging the Communication Gap https://www.trendmicro.com/en_us/research/24/i/cybersecurity-compass.html Research, News, and Perspective urn:uuid:d2d855c4-9d65-fb57-ee25-925a03fda760 Thu, 26 Sep 2024 00:00:00 +0000 Discover how to use the Cybersecurity Compass to foster effective conversations about cybersecurity strategy between non-technical and technical audiences, focusing on the phases of before, during, and after a breach. Trend Micro Research : Cyber Crime Trend Micro Research : Web Trend Micro Research : Privacy & Risks Trend Micro Research : Cyber Threats Trend Micro Research : Endpoints Trend Micro Research : Network Trend Micro Research : Security Strategies Trend Micro Research : Articles, News, Reports Juan Pablo Castro Inaugural World Tour 2024 Survey Findings https://www.trendmicro.com/en_us/research/24/i/world-tour-2024-survey.html Research, News, and Perspective urn:uuid:36ac91b8-59c6-52e4-479e-2e450eb6b35a Thu, 26 Sep 2024 00:00:00 +0000 Trend surveyed 750 cybersecurity professionals in 49 countries to learn more about the state of cybersecurity, from job pressures to the need for more advanced tools. Explore what CISOs had to say. Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Reports Trend Micro Research : Privacy & Risks Trend Micro Research : Cyber Threats Trend Micro Research : Report Trend Micro Research : Endpoints Trend Micro Research : Network Evolved Exploits Call for AI-Driven ASRM + XDR https://www.trendmicro.com/en_us/research/24/i/ai-asrm-xdr.html Research, News, and Perspective urn:uuid:8d5976b0-6b25-a95c-ca0e-0322b5177f9a Tue, 24 Sep 2024 00:00:00 +0000 AI-driven insights for managing emerging threats and minimizing organizational risk Trend Micro Research : Cloud Trend Micro Research : Compliance & Risks Trend Micro Research : Expert Perspective Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Jon Clay How Ransomhub Ransomware Uses EDRKillShifter to Disable EDR and Antivirus Protections https://www.trendmicro.com/en_us/research/24/i/how-ransomhub-ransomware-uses-edrkillshifter-to-disable-edr-and-.html Research, News, and Perspective urn:uuid:157137dc-64c5-5b36-ebf3-f10bf61ccde6 Fri, 20 Sep 2024 00:00:00 +0000 Trend Micro tracked this group as Water Bakunawa, behind the RansomHub ransomware, employs various anti-EDR techniques to play a high-stakes game of hide and seek with security solutions. Trend Micro Research : Endpoints Trend Micro Research : Ransomware Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Kyle Philippe Yu Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC https://www.trendmicro.com/en_us/research/24/i/earth-baxia-spear-phishing-and-geoserver-exploit.html Research, News, and Perspective urn:uuid:1ba9287e-a244-50b3-736d-5c2f37476c69 Thu, 19 Sep 2024 00:00:00 +0000 We observed Earth Baxia carrying out targeted attacks against APAC countries that involved advanced techniques like spear-phishing and customized malware, with data suggesting that the group operates from China. Trend Micro Research : Phishing Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Articles, News, Reports Ted Lee Identifying Rogue AI https://www.trendmicro.com/en_us/research/24/i/rogue-ai-part-3.html Research, News, and Perspective urn:uuid:4441f410-7fad-454a-0e65-9862a578d15a Thu, 19 Sep 2024 00:00:00 +0000 This is the third blog in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights. Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Expert Perspective Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats AI Team Vulnerabilities in Cellular Packet Cores Part IV: Authentication https://www.trendmicro.com/en_us/research/24/i/vulnerabilities-in-cellular-packet-cores-part-iv-authentication.html Research, News, and Perspective urn:uuid:9229791b-41da-b5ff-cf4b-71de17f04643 Wed, 18 Sep 2024 00:00:00 +0000 Our research reveals two significant vulnerabilities in Microsoft Azure Private 5G Core (AP5GC). The first vulnerability (CVE-2024-20685) allows a crafted signaling message to crash the control plane, leading to potential service outages. The second (ZDI-CAN-23960) disconnects and replaces attached base stations, disrupting network operations. While these issues are implementation-specific, their exploitation is made possible by a systemic weakness: the lack of mandatory authentication procedures between base stations and packet-cores. Trend Micro Research : Exploits & Vulnerabilities Trend Micro Research : Research Trend Micro Research : Network Trend Micro Research : Articles, News, Reports Richard Y Lin Protecting Against RCE Attacks Abusing WhatsUp Gold Vulnerabilities https://www.trendmicro.com/en_us/research/24/i/whatsup-gold-rce.html Research, News, and Perspective urn:uuid:aac20ec2-ae7d-8418-ecf0-ef3ef68e2b21 Thu, 12 Sep 2024 00:00:00 +0000 In this blog entry, we provide an analysis of the recent remote code execution attacks related to Progress Software’s WhatsUp Gold that possibly abused the vulnerabilities CVE-2024-6670 and CVE-2024-6671. Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Trend Micro Research : Exploits & Vulnerabilities Hitomi Kimura Earth Preta Evolves its Attacks with New Malware and Strategies https://www.trendmicro.com/en_us/research/24/i/earth-preta-new-malware-and-strategies.html Research, News, and Perspective urn:uuid:2c898e8e-392f-f12f-cd3a-b5bda1c7fe45 Mon, 09 Sep 2024 00:00:00 +0000 In this blog entry, we discuss our analysis of Earth Preta’s enhancements in their attacks by introducing new tools, malware variants and strategies to their worm-based attacks and their time-sensitive spear-phishing campaign. Trend Micro Research : Malware Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Lenart Bermejo TIDRONE Targets Military and Satellite Industries in Taiwan https://www.trendmicro.com/en_us/research/24/i/tidrone-targets-military-and-satellite-industries-in-taiwan.html Research, News, and Perspective urn:uuid:d3733434-84c6-b442-4bec-41ad354849d4 Fri, 06 Sep 2024 00:00:00 +0000 Our research reveals that an unidentified threat cluster we named TIDRONE have shown significant interest in military-related industry chains, particularly in the manufacturers of drones. Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Endpoints Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Pierre Lee Banking Trojans: Mekotio Looks to Expand Targets, BBTok Abuses Utility Command https://www.trendmicro.com/en_us/research/24/i/banking-trojans-mekotio-looks-to-expand-targets--bbtok-abuses-ut.html Research, News, and Perspective urn:uuid:e1ce69de-02ed-8ec6-8301-fe517d3d8256 Thu, 05 Sep 2024 00:00:00 +0000 Notorious Mekotio and BBTok are having a resurgence targeting Latin American users. Mekotio’s latest variant suggests the gang behind it is broadening their target, while BBTok is seen abusing MSBuild.exe to evade detection. Trend Micro Research : Phishing Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Mhica Romero Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion https://www.trendmicro.com/en_us/research/24/i/earth-lusca-ktlvdoor.html Research, News, and Perspective urn:uuid:f512b169-aebc-9d64-dea9-700c3229a651 Wed, 04 Sep 2024 00:00:00 +0000 While monitoring Earth Lusca, we discovered the threat group’s use of KTLVdoor, a highly obfuscated multiplatform backdoor, as part of a large-scale attack campaign. Trend Micro Research : Malware Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Cedric Pernet How AI Goes Rogue https://www.trendmicro.com/en_us/research/24/i/rogue-ai-part-2.html Research, News, and Perspective urn:uuid:267e2407-3d0d-a023-fdf2-11928e54f06b Tue, 03 Sep 2024 00:00:00 +0000 This is the second blog in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights. Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Expert Perspective Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats AI Team Silent Intrusions: Godzilla Fileless Backdoors Targeting Atlassian Confluence https://www.trendmicro.com/en_us/research/24/h/godzilla-fileless-backdoors.html Research, News, and Perspective urn:uuid:ef080dcd-ebb4-a037-e9f1-07aedafa6d30 Fri, 30 Aug 2024 00:00:00 +0000 Trend Micro discovered that old Atlassian Confluence versions that were affected by CVE-2023-22527 are being exploited using a new in-memory fileless backdoor. Trend Micro Research : Malware Trend Micro Research : Articles, News, Reports Trend Micro Research : Research Abdelrahman Esmail Threat Actors Target the Middle East Using Fake Palo Alto GlobalProtect Tool https://www.trendmicro.com/en_us/research/24/h/threat-actors-target-middle-east-using-fake-tool.html Research, News, and Perspective urn:uuid:d69bcebd-0cb0-980c-99cb-773d6351d7ad Thu, 29 Aug 2024 00:00:00 +0000 Threat actors are targeting users in the Middle East by distributing sophisticated malware disguised as the Palo Alto GlobalProtect tool. Trend Micro Research : Malware Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Endpoints Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Mohamed Fahmy AI Pulse: Sticker Shock, Rise of the Agents, Rogue AI https://www.trendmicro.com/en_us/research/24/h/agentic-ai-takeover.html Research, News, and Perspective urn:uuid:2d78f59f-9f3c-2a86-b522-9a55619ebe21 Thu, 29 Aug 2024 00:00:00 +0000 This issue of AI Pulse is all about agentic AI: what it is, how it works, and why security needs to be baked in from the start to prevent agentic AI systems from going rogue once they’re deployed. Trend Micro Research : Cloud Trend Micro Research : Latest News Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Trend Micro Research : Data center AI Team Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem https://www.trendmicro.com/en_us/research/24/h/cve-2023-22527-cryptomining.html Research, News, and Perspective urn:uuid:d6eb49aa-8f60-59eb-7f51-a536dcb8d707 Wed, 28 Aug 2024 00:00:00 +0000 A technical analysis on how CVE-2023-22527 can be exploited by malicious actors for cryptojacking attacks that can spread across the victim’s system. Trend Micro Research : Malware Trend Micro Research : Cyber Crime Trend Micro Research : Exploits & Vulnerabilities Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats Abdelrahman Esmail Complete Guide to Protecting Seven Attack Vectors https://www.trendmicro.com/en_us/research/22/k/cyber-attack-vectors-how-to-protect-them.html Research, News, and Perspective urn:uuid:935151e1-ede6-22ee-465e-7c39cc31cacf Tue, 27 Aug 2024 00:00:00 +0000 The quicker a cyberattack is identified, the less it costs. Jon Clay, VP of Threat Intelligence, reviews seven key initial attack vectors and provides proactive security tips to help you reduce cyber risk across the attack surface. Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Expert Perspective Trend Micro Research : Privacy & Risks Trend Micro Research : Cyber Threats Trend Micro Research : Compliance & Risks Trend Micro Research : Articles, News, Reports Jon Clay Confidence in GenAI: The Zero Trust Approach https://www.trendmicro.com/en_us/research/24/h/secure-genai.html Research, News, and Perspective urn:uuid:0e97fbff-717d-c5d3-40b9-835d9ed5154b Thu, 22 Aug 2024 00:00:00 +0000 Enterprises have gone all-in on GenAI, but the more they depend on AI models, the more risks they face. Trend Vision One™ – Zero Trust Secure Access (ZTSA) – AI Service Access bridges the gap between access control and GenAI services to protect the user journey. Trend Micro Research : Cloud Trend Micro Research : Privacy & Risks Trend Micro Research : Cyber Threats Trend Micro Research : Data center Trend Micro Research : Compliance & Risks Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Network Trend Micro Research : Security Strategies Trend Micro Research : Articles, News, Reports Sara Atie Securing the Power of AI, Wherever You Need It https://www.trendmicro.com/en_us/research/24/h/security-ai.html Research, News, and Perspective urn:uuid:9f1a7f14-bfb9-207d-6c91-1ba796e2a22f Thu, 22 Aug 2024 00:00:00 +0000 Explore how generative AI is transforming cybersecurity and enterprise resilience Trend Micro Research : Cloud Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Expert Perspective Trend Micro Research : Articles, News, Reports Shannon Murphy How Trend Micro Managed Detection and Response Pressed Pause on a Play Ransomware Attack https://www.trendmicro.com/en_us/research/24/h/pressing-pause-on-play-ransomware.html Research, News, and Perspective urn:uuid:8cefee7d-46ca-c295-3c65-19149782977d Thu, 22 Aug 2024 00:00:00 +0000 Using the Trend Micro Vision One platform, our MDR team was able to quickly identify and contain a Play ransomware intrusion attempt. Trend Micro Research : Endpoints Trend Micro Research : Ransomware Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Trent Bessell Rogue AI is the Future of Cyber Threats https://www.trendmicro.com/en_us/research/24/h/rogue-ai-part-1.html Research, News, and Perspective urn:uuid:c443384c-2b7f-43e1-0c4f-e27a3d07c83f Thu, 15 Aug 2024 00:00:00 +0000 This is the first blog in a series on Rogue AI. Later articles will include technical guidance, case studies and more. Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Expert Perspective Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats AI Team A Dive into Earth Baku’s Latest Campaign https://www.trendmicro.com/en_us/research/24/h/earth-baku-latest-campaign.html Research, News, and Perspective urn:uuid:faeef7e7-494f-db01-c84f-cc6ff9c9f895 Fri, 09 Aug 2024 00:00:00 +0000 Earth Baku has broadened its scope from the Indo-Pacific region to Europe, the Middle East, and Africa. In this blog entry, we examine the threat actor's latest tools, tactics, and procedures. Trend Micro Research : Malware Trend Micro Research : APT & Targeted Attacks Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Ted Lee Bringing Security Back into Balance https://www.trendmicro.com/en_us/research/24/h/cybersecurity-balance.html Research, News, and Perspective urn:uuid:7048f99f-dab0-5d5d-4bf7-152ecf7d3f65 Sun, 04 Aug 2024 00:00:00 +0000 This article by Trend Micro CEO Eva Chen brings focus back to striking the cybersecurity strategies balance between business C-suite and information technology (IT) departments. Trend Micro Research : Exploits & Vulnerabilities Trend Micro Research : Expert Perspective Trend Micro Research : Cyber Threats Trend Micro Research : Data center Trend Micro Research : Endpoints Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Network Trend Micro Research : Articles, News, Reports Eva Chen Cybersecurity Compass: An Integrated Cyber Defense Strategy https://www.trendmicro.com/en_us/research/24/h/cyber-defense-strategy-framework.html Research, News, and Perspective urn:uuid:e1a603f5-806c-be6d-875f-1289c4e9897d Fri, 02 Aug 2024 00:00:00 +0000 Explore how the Cybersecurity Compass can guide various security professionals' and stakeholders' decision-making before, during, and after a breach. Trend Micro Research : Cyber Crime Trend Micro Research : Web Trend Micro Research : Privacy & Risks Trend Micro Research : Cyber Threats Trend Micro Research : Endpoints Trend Micro Research : Network Trend Micro Research : Security Strategies Trend Micro Research : Articles, News, Reports Juan Pablo Castro Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft https://www.trendmicro.com/en_us/research/24/h/malvertising-campaign-fake-ai-editor-website-credential-theft.html Research, News, and Perspective urn:uuid:d001398c-888d-ee48-b76d-6e0483ed8150 Thu, 01 Aug 2024 00:00:00 +0000 We uncovered a malvertising campaign where the threat actor hijacks social media pages, renames them to mimic popular AI photo editors, then posts malicious links to fake websites. Trend Micro Research : Malware Trend Micro Research : Cyber Crime Trend Micro Research : Research Trend Micro Research : Phishing Trend Micro Research : Cyber Threats Trend Micro Research : Endpoints Trend Micro Research : Articles, News, Reports Jaromir Horejsi AI-Powered Deepfake Tools Becoming More Accessible Than Ever https://www.trendmicro.com/en_us/research/24/g/ai-deepfake-cybercrime.html Research, News, and Perspective urn:uuid:18b20741-b026-8d52-834b-bf76daf7b338 Tue, 30 Jul 2024 00:00:00 +0000 Trend Micro research uncovers new cybercrime tools posing increased threats to security, highlighting the rapid evolution of AI-powered hacking services and their potential for mass exploitation Trend Micro Research : Cloud Trend Micro Research : Cyber Crime Trend Micro Research : Artificial Intelligence (AI) Trend Micro Research : Research Trend Micro Research : Articles, News, Reports Trend Micro Research : Cyber Threats