Research, News, and Perspectives

Conformità e rischi

Trend Vision One™ Integration with AWS Security Hub CSPM: Unifying Cloud Security

The integration between Trend Vision One and Security Hub CSPM is exactly that, two powerful platforms enhancing each other to keep your AWS infrastructure protected.

How To Dec 10, 2025

Save to Folio

How To Dec 10, 2025

Save to Folio

Cloud

Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations

Enterprise 2025 introduces the first full cloud adversary emulation and expanded multi-platform testing, focusing on two advanced threat areas: Scattered Spider’s cloud-centric attacks and Mustang Panda’s long-term espionage operations.

Latest News Dec 10, 2025

Save to Folio

Latest News Dec 10, 2025

Save to Folio

Sfruttamento vulnerabilità

CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation

CVE-2025-55182 is a CVSS 10.0 pre-authentication RCE affecting React Server Components. Amid the flood of fake proof-of-concept exploits, scanners, exploits, and widespread misconceptions, this technical analysis intends to cut through the noise.

Latest News Dec 10, 2025

Save to Folio

Latest News Dec 10, 2025

Save to Folio

We Don’t Just Respond to Change, We Shape It Together

By Christina Decker, Director Strategic Channels Europe, Trend Micro

Expert Perspective Dec 09, 2025

Save to Folio

Expert Perspective Dec 09, 2025

Save to Folio

Minacce cyber

AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

In this blog entry, Trend™ Research provides a comprehensive breakdown of GhostPenguin, a previously undocumented Linux backdoor with low detection rates that was discovered through AI-powered threat hunting and in-depth malware analysis.

Latest News Dec 08, 2025

Save to Folio

Latest News Dec 08, 2025

Save to Folio

Sfruttamento vulnerabilità

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know

CVE-2025-55182 is a critical (CVSS 10.0) pre-authentication remote code execution vulnerability affecting React Server Components used in React.js, Next.js, and related frameworks (see the context section for a more exhaustive list of affected frameworks).

Research Dec 05, 2025

Save to Folio

Research Dec 05, 2025

Save to Folio

Conformità e rischi

Project View: A New Era of Prioritized and Actionable Cloud Security

In today's cloud-first world, security teams face an overwhelming flood of alerts, fragmented visibility, and reactive workflows. The complexity of modern cloud environments—spanning multi-cloud deployments, ephemeral assets, and decentralized ownership—demands a new approach to risk management.

How To Dec 04, 2025

Save to Folio

How To Dec 04, 2025

Save to Folio

Malware

ValleyRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading

Job seekers looking out for opportunities might instead find their personal devices compromised, as a ValleyRAT campaign propagated through email leverages Foxit PDF Reader for concealment and DLL side-loading for initial entry.

Latest News Dec 03, 2025

Save to Folio

Latest News Dec 03, 2025

Save to Folio

Phishing

Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp

Through AI-driven code conversion and a layered infection chain involving different file formats and scripting languages, the threat actors behind Water Saci are quickly upgrading their malware delivery and propagation methods across WhatsApp in Brazil.

Research Dec 02, 2025

Save to Folio

Research Dec 02, 2025

Save to Folio

Minacce cyber

What’s your CNAPP maturity?

More and more enterprises are opting for cloud-native application protection platforms (CNAPPs) instead of complex and hard-to-manage cloud security point solutions. Find out where your organization is on its CNAPP maturity journey.

Consumer Focus Dec 01, 2025

Save to Folio

Consumer Focus Dec 01, 2025

Save to Folio