Media Coverage

There’s a new reason why Java application developers using the Spring Framework have to patch it as soon as possible. According to researchers at Trend Micro, unpatched versions of the framework are being exploited to force servers to join the Mirai botnet. That botnet is used to spread denial of service attacks. The two vulnerabilities, dubbed SpringShell or Spring4Shell by some, allow an attacker to get remote access to a Spring local or cloud server. Developers are urged to install upgrades to Spring Framework and Spring Boot. They should also look for signs that their Spring environment has been compromised.

Canadian Security recently spoke with Greg Young, Trend Micro’s VP of cybersecurity, following the company’s release of its annual security roundup report. Trend Micro found that public sectors like education, healthcare and finance remain the most vulnerable to email phishing tactics. Young discussed how email threats are changing and why these sectors are easy prey for scammers.

Researchers at Trend Micro now say that hackers have developed a weaponized exploit that successfully installs Mirai. A blog post they published didn’t identify the type of device or the CPU used in the infected devices. The post did, however, say a malware file server they found stored multiple variants of the malware for different CPU architectures.

Even as instances of cyberattacks grow in North America and worldwide, business leaders in charge of cybersecurity appear to be putting other priorities first, according to a recent study from cybersecurity firm Trend Micro. Antoine Saikaley, Canadian technical director for Trend Micro, said the findings highlight the need to “reframe the discussion around cybersecurity and reposition it as a fundamental driver of business growth, which connects members of the C-suite and their IT decision-makers.”

Cloud-based cryptomining has evolved into a vibrant form of cyber crime, and a variety of attack groups are fighting each other for access to cloud accounts. Cryptomining groups hack victims' cloud computing accounts, using their computing power to mine cryptocurrency, explained Trend Micro in its latest report.

According to new research from Trend Micro, threats to digital infrastructure are ramping up as threat actors increase their rate of attack. Ransomware attackers are honing their targets to businesses and industries more likely to pay, and they are getting better at exploiting human error, states the company.

In some places around the world this is Fraud Prevention Month. According to the Canadian Anti-Fraud Centre, $379 million were lost to scams and fraud in 2021, which was an increase of 130 per cent compared to 2020. Security researchers at Trend Micro remind consumers that while companies do their best to stop being defrauded, consumers have a role, too. That means not falling for emails with offers that appear too good to be true.

March is Fraud Prevention Month and a multinational cyber security software company is offering tips for people to stay. Brandon Rowe speaks with Greg Young, the vice-president of cybersecurity at Trend Micro to find out what people need to know to avoid being scammed.

CanadianSME had a chance to chat with Myla Pilao, from Trend Micro Research to discuss their Cybersecurity predictions for 2022 which predicts that organizations will be better prepared to handle cyber risks as they build out and implement proactive security strategies. Myla discussed the key steps for businesses to undertake to ensure they remain safe in 2022 and beyond.

On March 9-11, 2022, attend the 2nd Annual Vancouver International Privacy & Security Summit. The hybrid summit will be delivered both in-person and on a customized virtual platform and will attract over 1,000 security and privacy professionals from around the world to discuss important issues on how we securely live, work, and play as the move to digital platforms accelerates. Speakers include Myla Pilao, director of threat research, Trend Micro.