Credit to Author: David Fiser| Date: Wed, 17 Aug 2022 00:00:00 +0000
While DevOps practitioners use environment variables to regularly keep secrets in applications, these could be conveniently abused by cybercriminals for their malicious activities, as our analysis shows.
Read moreCredit to Author: Magno Logan| Date: Tue, 16 Aug 2022 00:00:00 +0000
This blog entry discusses what an OPA is and what it’s for, what we’ve discovered after identifying 389 exposed OPA servers via Shodan, and how exposed OPAs can negatively impact your applications’ overall security.
Read moreCredit to Author: William Malik| Date: Mon, 08 Aug 2022 00:00:00 +0000
Understand the cybersecurity risks in the Metaverse
Read more
This post relays the latest threat detection tool innovation of AWS – Amazon GuardDuty Malware Protection. This tool works closely with Trend Micro cloud solutions, providing another valuable layer of defense in our fight against a shared adversary.
Credit to Author: Alfredo Oliveira| Date: Thu, 21 Jul 2022 00:00:00 +0000
In this blog entry, we discuss a malicious campaign that targets Alibaba Cloud’s OSS buckets with leaked credentials for malware distribution and cryptojacking.
Read more
Credit to Author: Magno Logan| Date: Thu, 07 Jul 2022 00:00:00 +0000
We investigate cloud-based cryptocurrency miners that leverage GitHub Actions and Azure virtual machines, including the cloud infrastructure and vulnerabilities that malicious actors exploit for easy monetary gain.
Read more
Credit to Author: Mohamed Fahmy| Date: Tue, 28 Jun 2022 00:00:00 +0000
We analyzed cases of a Log4Shell vulnerability being exploited in certain versions of the software VMware Horizon. Many of these attacks resulted in data being exfiltrated from the infected systems. However, we also found that some of the victims were infected with ransomware days after the data exfiltration.
Read more
Credit to Author: Bharat Mistry| Date: Mon, 06 Jun 2022 00:00:00 +0000
Trend Micro research reveals struggle to control cyber risks against mounting digital attack surfaces.
Read more
Credit to Author: Magno Logan| Date: Tue, 24 May 2022 00:00:00 +0000
While researching cloud-native tools, our Shodan scan revealed over 200,000 publicly exposed Kubernetes clusters and kubelet ports that can be abused by criminals.
Read more