We uncover how a campaign used Atlassian Jira Cloud to launch automated and targeted spam campaigns, exploiting trusted SaaS workflows to bypass security controls. Save to Folio ...
A new IoT botnet called Persirai has been discovered targeting over 1,000 IP Camera models based on various Original Equipment Manufacturer (OEM) products. Save to Folio ...
様式的な痕跡が複数、独立に一致している点が、単なる「AIらしさ」を超えて高確度と言える根拠です。一方で、これらはあくまで様式のシグネチャであり、熟練者が意図してこの作法で書いた可能性を完全には排除できません。直接の証拠が欠けている以上、私たちは「確認 ...
PHP2Shellは、PHPにおける2件の重大なリモートコード実行(RCE)の脆弱性(CVE-2026-109618、CVE-2026-109619)です。PHPの修正版が公開される前に、脆弱性の詳細が流出し、エクスプロイトコードも公開されました。2026年10月21日に、修正版(PHP 8.2.35、8.3.36、8.4.27、8.5.12)が公開されています。
特定非営活動利法人CIO Lounge とTrendAIによる共同調査「 セキュリティ成熟度と被害の実態調査 2026 ...
We discovered active exploitation of a vulnerability in the Spring Framework designated as CVE-2022-22965 that allows malicious actors to download the Mirai botnet malware.
Ransomware Updated Shadowpad Malware Leads to Ransomware Deployment In this blog entry, we discuss how Shadowpad is being used to deploy a new undetected ransomware family. Attackers deploy the ...
This blog entry provides an analysis of the Noodle RAT backdoor, which is likely being used by multiple Chinese-speaking groups engaged in espionage and other types of cybercrime.
Earth Preta has actively been changing its tools, tactics, and procedures (TTPs) to bypass security solutions. In this blog entry, we will introduce and analyze the tools and malware used by the ...
Void Dokkaebi, a North Korea-aligned intrusion set, has updated its information-stealing malware, InvisibleFerret, shifting its delivery format to evade script-based detections. Save to Folio ...
Iron Tiger is an advanced persistent threat (APT) group that has been focused primarily on cyberespionage for more than a decade. In 2022, we noticed that they updated SysUpdate, one of their custom ...