※ 本サービスにおけるASM（Attack Surface ...

様式的な痕跡が複数、独立に一致している点が、単なる「AIらしさ」を超えて高確度と言える根拠です。一方で、これらはあくまで様式のシグネチャであり、熟練者が意図してこの作法で書いた可能性を完全には排除できません。直接の証拠が欠けている以上、私たちは「確認 ...

PHP2Shellは、PHPにおける2件の重大なリモートコード実行（RCE）の脆弱性（CVE-2026-109618、CVE-2026-109619）です。PHPの修正版が公開される前に、脆弱性の詳細が流出し、エクスプロイトコードも公開されました。2026年10月21日に、修正版（PHP 8.2.35、8.3.36、8.4.27、8.5.12）が公開されています。

特定非営活動利法人CIO Lounge とTrendAIによる共同調査「 セキュリティ成熟度と被害の実態調査 2026 ...

An AI agent has run a ransomware intrusion on its own for the first time, from break-in to data destruction. The autonomous attacks TrendAI™ Research predicted are beginning to arrive, and defending ...

TrendAI™ Research breaks down what changed in CISA’s updated advisory on an ongoing PLC exploitation, why this activity might be more dangerous than a similar campaign in 2023, and how organizations ...

Void Dokkaebi, a North Korea-aligned intrusion set, has updated its information-stealing malware, InvisibleFerret, shifting its delivery format to evade script-based detections. Save to Folio ...

Cyber Crime One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September ...

In this blog entry, researchers from the TrendAI™ MDR team discuss how they mapped the full end-to-end operation of SHADOW-WATER-063’s Banana RAT banking malware by analyzing server-side artifacts and ...

Targeting multiple industries worldwide, the InstallFix campaign uses fake Claude AI installer pages to trick users into running malware that collects system information, disables security features, ...

Not every cloud breach starts with malware or a zero-day. In this incident, attackers discovered an exposed Spring Boot Actuator endpoint, harvested credentials from leaked configuration data, then ...

Malware New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages The BoryptGrab campaign uses fake SEO‑optimized GitHub repositories and deceptive download pages to distribute a ...