What We Know About the NPM Supply Chain Attack 2025-09-18 at 13:34 By Trend™ Research outlines the critical details behind the ongoing NPM supply chain attack and offers essential steps to stay protected against potential compromise. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
What We Know About the NPM Supply Chain Attack Read More »
What’s Your Cybersecurity Maturity? 2025-09-10 at 10:53 By This blog post looks at four key milestones along the cybersecurity maturity journey and poses some questions you can ask to determine the stage of your organization’s progress. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
What’s Your Cybersecurity Maturity? Read More »
Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks 2025-08-14 at 11:38 By Crypto24 is a ransomware group that stealthily blends legitimate tools with custom malware, using advanced evasion techniques to bypass security and EDR technologies. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
Proactive Security and Insights for SharePoint Attacks (CVE-2025-53770 and CVE-2025-53771) 2025-07-22 at 02:18 By CVE-2025-53770 and CVE-2025-53771 are vulnerabilities in on-premise Microsoft SharePoint Servers that evolved from previously patched flaws, allowing unauthenticated remote code execution through advanced deserialization and ViewState abuse. This article is an excerpt from Trend Micro Research, News and Perspectives View Original
AI Dilemma: Emerging Tech as Cyber Risk Escalates 2025-07-04 at 07:17 By As AI adoption accelerates, businesses face mounting cyber threats—and urgent choices about secure implementation This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
AI Dilemma: Emerging Tech as Cyber Risk Escalates Read More »
Keeping Pace and Embracing Emerging Technologies 2025-06-10 at 23:47 By Trend Micro and the NEOM McLaren Formula E Team stay ahead of the curve by embracing new technologies, fostering a no-blame culture, and making split-second decisions in high-stakes environments. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
Keeping Pace and Embracing Emerging Technologies Read More »
Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain 2025-05-22 at 12:23 By We have detected a new tactic involving fake CAPTCHA pages that trick users into executing harmful commands in Windows. This scheme uses disguised files sent via phishing and other malicious methods. This article is an excerpt from Trend Micro
Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain Read More »
Earth Ammit Disrupts Drone Supply Chains Through Coordinated Multi-Wave Attacks in Taiwan 2025-05-13 at 10:16 By Trend™ Research discusses the evolving tradecraft of threat actor Earth Ammit, proven by the advanced toolset used in its TIDRONE and VENOM campaigns that targeted the drone supply chain. This article is an excerpt from Trend Micro Research, News
Exploring PLeak: An Algorithmic Method for System Prompt Leakage 2025-05-01 at 12:03 By What is PLeak, and what are the risks associated with it? We explored this algorithmic technique and how it can be used to jailbreak LLMs, which could be leveraged by threat actors to manipulate systems and steal sensitive data. This article is
Exploring PLeak: An Algorithmic Method for System Prompt Leakage Read More »
Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations 2025-04-24 at 05:08 By In this blog entry, we discuss how North Korea’s significant role in cybercrime – including campaigns attributed to Void Dokkaebi – is facilitated by extensive use of anonymization networks and the use of Russian IP ranges. This article is an excerpt
Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations Read More »
CTEM + CREM: Aligning Your Cybersecurity Strategy 2025-04-09 at 05:41 By Cyber threats evolve daily, and organizations need to move beyond traditional security approaches to stay ahead. That’s why Continuous Threat Exposure Management (CTEM), a concept introduced by Gartner, has been gaining traction. CTEM isn’t just another cybersecurity buzzword; it’s a structured, continuous program designed
CTEM + CREM: Aligning Your Cybersecurity Strategy Read More »
GTC 2025: AI, Security & The New Blueprint 2025-04-08 at 03:31 By From quantum leaps to AI factories, GTC 2025 proved one thing: the future runs on secure foundations. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
GTC 2025: AI, Security & The New Blueprint Read More »
Capacity is Critical in Riskier Threat Landscape 2025-04-04 at 10:32 By International cooperation, reporting, and capacity building are critical to enhance cybersecurity defenses. Effective governance in an increasingly risky landscape requires visibility as well as coordinated vulnerability disclosure. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
Capacity is Critical in Riskier Threat Landscape Read More »
AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution 2025-03-11 at 10:15 By In this blog entry, we uncovered a campaign that uses fake GitHub repositories to distribute SmartLoader, which is then used to deliver Lumma Stealer and other malicious payloads. The campaign leverages GitHub’s trusted reputation to evade detection, using AI-generated content to make
AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution Read More »
From Event to Insight: Unpacking a B2B Business Email Compromise (BEC) Scenario 2025-03-05 at 09:50 By Trend Micro™ Managed XDR assisted in an investigation of a B2B BEC attack that unveiled an entangled mesh weaved by the threat actor with the help of a compromised server, ensnaring three business partners in a scheme that spanned
From Event to Insight: Unpacking a B2B Business Email Compromise (BEC) Scenario Read More »
Exploiting DeepSeek-R1: Breaking Down Chain of Thought Security 2025-03-04 at 16:00 By This entry explores how the Chain of Thought reasoning in the DeepSeek-R1 AI model can be susceptible to prompt attacks, insecure output generation, and sensitive data theft. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
Exploiting DeepSeek-R1: Breaking Down Chain of Thought Security Read More »
Future of Cybersecurity: Will XDR Absorb SIEM & SOAR? 2025-01-31 at 22:20 By XDR is reshaping cybersecurity by unifying and enhancing SIEM and SOAR capabilities into a single platform. It addresses alert fatigue, improves incident correlation, simplifies operations, and enhances efficiency for SOC teams. This article is an excerpt from Trend Micro Research, News and
Future of Cybersecurity: Will XDR Absorb SIEM & SOAR? Read More »
Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response 2025-01-30 at 10:18 By The Managed XDR team investigated a sophisticated campaign distributing Lumma Stealer through GitHub, where attackers leveraged the platform’s release infrastructure to deliver malware such as SectopRAT, Vidar, and Cobeacon. This article is an excerpt from Trend Micro Research, News and Perspectives
Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response Read More »
ASRM: A New Pillar for Cyber Insurance Underwriting 2025-01-30 at 02:33 By ASRM transforms cyber insurance underwriting by integrating real-time risk assessments, advanced tools (NDR, EDR, Cloud Security, MDR), and proactive mitigation strategies to improve accuracy, reduce claims, and build trust. This article is an excerpt from Trend Micro Research, News and Perspectives View Original
ASRM: A New Pillar for Cyber Insurance Underwriting Read More »
Invisible Prompt Injection: A Threat to AI Security 2025-01-23 at 00:07 By This article explains the invisible prompt injection, including how it works, an attack scenario, and how users can protect themselves. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source
Invisible Prompt Injection: A Threat to AI Security Read More »