Research, News, and Perspectives

Cyberrisiken

Agentengetriebene Edge-KI: Cybersicherheitsbedrohungen

Agentic Edge-KI-Geräte vergrößern die Angriffsfläche im Vergleich zu herkömmlichen IoT-Geräten. Ihre komplexe Software, Hardware-Sensoren und Aktoren sowie Netzwerkkonnektivität machen Angriffe auf allen Architekturebenen möglich.

Expert Perspective Dec 11, 2025

Save to Folio

Expert Perspective Dec 11, 2025

Save to Folio

Phishing

SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics

In November, a targeted spear-phishing campaign was observed using Trend Micro-themed lures against various industries, but this was quickly detected and thwarted by the Trend Vision One™ platform.

Latest News Dec 11, 2025

Save to Folio

Latest News Dec 11, 2025

Save to Folio

Cyberrisiken

KI-gestützte Fertigungsstraßen für Angriffe

Kriminelle nutzen GenAI, um Texte, Bilder, Videos und Stimmen zu produzieren, die kombiniert als gut koordinierter automatisierter Scam-Ablauf in Fließbandfertigung erstellt und verbreitet werden. Wir zeigen mit Beispielen, was dahintersteckt.

Expert Perspective Dec 10, 2025

Save to Folio

Expert Perspective Dec 10, 2025

Save to Folio

Compliance und Risiko

Trend Vision One™ Integration with AWS Security Hub CSPM: Unifying Cloud Security

The integration between Trend Vision One and Security Hub CSPM is exactly that, two powerful platforms enhancing each other to keep your AWS infrastructure protected.

How To Dec 10, 2025

Save to Folio

How To Dec 10, 2025

Save to Folio

Cloud

Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations

Enterprise 2025 introduces the first full cloud adversary emulation and expanded multi-platform testing, focusing on two advanced threat areas: Scattered Spider’s cloud-centric attacks and Mustang Panda’s long-term espionage operations.

Latest News Dec 10, 2025

Save to Folio

Latest News Dec 10, 2025

Save to Folio

Ausnutzung von Schwachstellen

CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation

CVE-2025-55182 is a CVSS 10.0 pre-authentication RCE affecting React Server Components. Amid the flood of fake proof-of-concept exploits, scanners, exploits, and widespread misconceptions, this technical analysis intends to cut through the noise.

Latest News Dec 10, 2025

Save to Folio

Latest News Dec 10, 2025

Save to Folio

Wir reagieren nicht auf Wandel – wir gestalten ihn gemeinsam

Von Christina Decker, Director Strategic Channels Europe, Trend Micro

Expert Perspective Dec 09, 2025

Save to Folio

Expert Perspective Dec 09, 2025

Save to Folio

Cyberbedrohungen

AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

In this blog entry, Trend™ Research provides a comprehensive breakdown of GhostPenguin, a previously undocumented Linux backdoor with low detection rates that was discovered through AI-powered threat hunting and in-depth malware analysis.

Latest News Dec 08, 2025

Save to Folio

Latest News Dec 08, 2025

Save to Folio

Ausnutzung von Schwachstellen

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know

CVE-2025-55182 is a critical (CVSS 10.0) pre-authentication remote code execution vulnerability affecting React Server Components used in React.js, Next.js, and related frameworks (see the context section for a more exhaustive list of affected frameworks).

Research Dec 05, 2025

Save to Folio

Research Dec 05, 2025

Save to Folio

Cyberrisiken

Deutschland-Stack: Cybersicherheit muss strategischer Grundpfeiler sein

Der Deutschland-Stack repräsentiert Deutschlands ambitionierte Vision einer souveränen digitalen Verwaltung. Leider steht die Cybersicherheit dabei momentan noch zu wenig im Fokus.

Expert Perspective Dec 04, 2025

Save to Folio

Expert Perspective Dec 04, 2025

Save to Folio