Research, News, and Perspectives

Exploits & Vulnerabilities

Celebrating 15 Years of Pwn2Own

Join Erin Sindelar, Mike Gibson, Brian Gorenc, and Dustin Childs as they discuss Pwn2Own's 15th anniversary, what we've learned, and how the program will continue to serve the cybersecurity community in the future.

New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices

Trend Micro Research detected “Cheerscrypt”, a new Linux-based ransomware variant that compromises ESXi servers. We discuss our initial findings in this report.

Research May 25, 2022

Cloud

The Fault in Our kubelets: Analyzing the Security of Publicly Exposed Kubernetes Clusters

While researching cloud-native tools, our Shodan scan revealed over 200,000 publicly exposed Kubernetes clusters and kubelet ports that can be abused by criminals.

May 24, 2022

Cyber Threats

Cyber risk is an existential threat: it’s time to manage it properly

Cybersecurity experts have often warned about the financial and reputational repercussions of serious breaches. Some researchers have even tried to estimate the average cost of such incidents. But there’s nothing more sobering than hearing it straight from those businesses directly impacted.

Bruised but Not Broken: The Resurgence of the Emotet Botnet Malware

During the first quarter of 2022, we discovered a significant number of infections using multiple new Emotet variants that employed both old and new techniques to trick their intended victims into accessing malicious links and enabling macro content.

Research May 19, 2022

Uncovering a Kingminer Botnet Attack Using Trend Micro™ Managed XDR

Trend Micro’s Managed XDR team addressed a Kingminer botnet attack conducted through an SQL exploit. We discuss our findings and analysis in this report.

Research May 18, 2022

Trend Micro's One Vision, One Platform

Why Trend Micro is evolving its approach to enterprise protection

Security Strategies May 17, 2022

Cyber Crime

One year on: what can we learn from the HSE ransomware attack?

When a Conti ransomware affiliate struck Ireland’s Health Service Executive (HSE) a year ago, we discovered something very important about threat actors. Pandemic or no pandemic, they’re prepared to hit any target if it’s deemed lucrative and exposed enough.

Research May 16, 2022

Mobile

Fake Mobile Apps Steal Facebook Credentials, Cryptocurrency-Related Keys

We recently observed a number of apps on Google Play designed to perform malicious activities such as stealing user credentials and other sensitive user information, including private keys.

Research May 16, 2022

Compliance & Risks

S4x22: ICS Security Creates the Future

The ICS Security Event S4 was held for the first time in two years, bringing together more than 800 business leaders and specialists from around the world to Miami Beach on 19-21 Feb 2022. The theme was CREATE THE FUTURE.

Security Strategies May 12, 2022

Explore the Cyber Risk Index (CRI)

Research, News, and Perspectives

New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware

Celebrating 15 Years of Pwn2Own

New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices

The Fault in Our kubelets: Analyzing the Security of Publicly Exposed Kubernetes Clusters

Cyber risk is an existential threat: it’s time to manage it properly

Bruised but Not Broken: The Resurgence of the Emotet Botnet Malware

Uncovering a Kingminer Botnet Attack Using Trend Micro™ Managed XDR

Trend Micro's One Vision, One Platform

One year on: what can we learn from the HSE ransomware attack?

Fake Mobile Apps Steal Facebook Credentials, Cryptocurrency-Related Keys

S4x22: ICS Security Creates the Future

Explore the Cyber Risk Index (CRI)

Research, News, and Perspectives

Trending Topics