Media Coverage

There’s a new reason why Java application developers using the Spring Framework have to patch it as soon as possible. According to researchers at Trend Micro, unpatched versions of the framework are being exploited to force servers to join the Mirai botnet. That botnet is used to spread denial of service attacks. The two vulnerabilities, dubbed SpringShell or Spring4Shell by some, allow an attacker to get remote access to a Spring local or cloud server. Developers are urged to install upgrades to Spring Framework and Spring Boot. They should also look for signs that their Spring environment has been compromised.

Canadian Security recently spoke with Greg Young, Trend Micro’s VP of cybersecurity, following the company’s release of its annual security roundup report. Trend Micro found that public sectors like education, healthcare and finance remain the most vulnerable to email phishing tactics. Young discussed how email threats are changing and why these sectors are easy prey for scammers.

Researchers at Trend Micro now say that hackers have developed a weaponized exploit that successfully installs Mirai. A blog post they published didn’t identify the type of device or the CPU used in the infected devices. The post did, however, say a malware file server they found stored multiple variants of the malware for different CPU architectures.

Even as instances of cyberattacks grow in North America and worldwide, business leaders in charge of cybersecurity appear to be putting other priorities first, according to a recent study from cybersecurity firm Trend Micro. Antoine Saikaley, Canadian technical director for Trend Micro, said the findings highlight the need to “reframe the discussion around cybersecurity and reposition it as a fundamental driver of business growth, which connects members of the C-suite and their IT decision-makers.”

Cloud-based cryptomining has evolved into a vibrant form of cyber crime, and a variety of attack groups are fighting each other for access to cloud accounts. Cryptomining groups hack victims' cloud computing accounts, using their computing power to mine cryptocurrency, explained Trend Micro in its latest report.