arrow_back
search
close

Content has been added to your Folio

Research, News, and Perspectives

Add Filters
Filter by:
Threats
Environments
Article Type
Medium
An Investigation of AWS Credential Exposure via Overprivileged Containers
Exploits & Vulnerabilities

An Investigation of AWS Credential Exposure via Overprivileged Containers

Overprivileged or misconfigured containers in Amazon EKS can expose sensitive AWS credentials to threats like packet sniffing and API spoofing, highlighting the need for least privilege and proactive security to detect and reduce these risks.

June 19, 2025

Trending Topics

Malware

Uncovering a Tor-Enabled Docker Exploit

Exploits & Vulnerabilities

Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet

APT & Targeted Attacks

Clone, Compile, Compromise: Water Curse’s Open-Source Malware Trap on GitHub

Ransomware

Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper

Artificial Intelligence (AI)

Why a Classic MCP Server Vulnerability Can Undermine Your Entire AI Agent

A single SQL injection bug in Anthropic’s SQLite MCP server—forked over 5,000 times—can seed stored prompts, exfiltrate data, and hand attackers the keys to entire agent workflows. This entry unpacks the attack chain and lays out concrete fixes to shut it down.

Jun 24, 2025

Save to Folio

Jun 24, 2025

Save to Folio

Exploits & Vulnerabilities

An Investigation of AWS Credential Exposure via Overprivileged Containers

Overprivileged or misconfigured containers in Amazon EKS can expose sensitive AWS credentials to threats like packet sniffing and API spoofing, highlighting the need for least privilege and proactive security to detect and reduce these risks.

Research Jun 19, 2025

Save to Folio

Research Jun 19, 2025

Save to Folio

Malware

Uncovering a Tor-Enabled Docker Exploit

A recent attack campaign took advantage of exposed Docker Remote APIs and used the Tor network to deploy a stealthy cryptocurrency miner. This blog breaks down the attack chain.

Research Jun 18, 2025

Save to Folio

Research Jun 18, 2025

Save to Folio

APT & Targeted Attacks

Clone, Compile, Compromise: Water Curse’s Open-Source Malware Trap on GitHub

The Trend Micro™ Managed Detection and Response team uncovered a threat campaign orchestrated by an active group, Water Curse. The threat actor exploits GitHub, one of the most trusted platforms for open-source software, as a delivery channel for weaponized repositories.

Investigations Jun 16, 2025

Save to Folio

Investigations Jun 16, 2025

Save to Folio

Ransomware

Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper

Anubis is an emerging ransomware-as-a-service (RaaS) group that adds a destructive edge to the typical double-extortion model with its file-wiping feature. We explore its origins and examine the tactics behind its dual-threat approach.

Jun 13, 2025

Save to Folio

Jun 13, 2025

Save to Folio

Exploits & Vulnerabilities

Critical SAP Vulnerability Exposes Enterprises

CVE-2025-31324 in SAP NetWeaver Visual Composer enables unauthenticated file uploads, exposing systems to RCE and data loss - learn what to do about it.

Expert Perspective Jun 12, 2025

Save to Folio

Expert Perspective Jun 12, 2025

Save to Folio

Trend Vision One™ - Proactive Security Starts Here.

Resources

Support

About Trend

Country Headquarters

  • Trend Micro - United Kingdom (GB)
  • Podium Level (East) 2 Kingdom Street
    Paddington Central
    London W2 6BD, United Kingdom

Select a country / region

close

The Americas

Middle East & Africa

Europe

Asia & Pacific

Experience our enterprise cybersecurity platform for free

Copyright ©2025 Trend Micro Incorporated. All rights reserved.