Skip to main content

TrendAI™ Deep Research

spark

Featured Articles

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation
AIOT & critical infrastructure

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation

The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.

16 سبتمبر 2026TrendAI™ Research
Read article
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
IoT & smart devicesASM ASRM
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data

China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.

10 سبتمبر 2026 6 min
Fyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article
An industrial worker inspecting a warehouse
HacktivismRansomware & extortion
Mapping the Criminal Economy Targeting Critical Infrastructure

TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.

2 سبتمبر 2026 7 min
Mayra Rosario Fuentes, Stephen Hilt, Numaan Huq
Read article
Security 101: Virtual Patching
Exploits & Zero-Days
Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

25 أغسطس 2026 5 min
TrendAI™ Research
Read article

Search for research articles

CryptocurrencyCloud security
Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups

Our research into cloud-based cryptocurrency mining sheds light on the malicious actor groups involved in this space, their ongoing battle for cloud resources, and the actual extent of the impact of their attacks.

March 29th, 2022 7 min read TrendAI™ Research
Read Article
Ransomware & extortionExploits & Zero-Days
Ransomware Spotlight: Hive

Hive ransomware is one of the new ransomware families in 2021 that poses significant challenges to enterprises worldwide. We take an in-depth look at the ransomware group’s operations and discuss how organizations can bolster their defenses against it.

March 18th, 2022 7 min read TrendAI™ Research
Read Article
Ransomware & extortionExploits & Zero-Days
Ransomware Spotlight: Clop

We take a closer look at the operations of Clop, a prolific ransomware family that has gained notoriety for its high-profile attacks. We review this ransomware group’s constantly changing schemes and discuss how companies can shore up defenses against this threat.

February 22nd, 2022 12 min read TrendAI™ Research
Read Article
Phishing & BECSocial engineering
Hidden Scams in Malicious Scans: How to Use QR Codes Safely

The popularity of QR codes has created fertile ground for malicous actors to spruce up their malware tool kit for scams that steal not only personal information but also hard-earned assets that are impossible to recover once lost. We take a closer look at the different QR code-related scams and provide helpful tips on how to use QR codes safely.

February 9th, 2022 8 min read TrendAI™ Research
Read Article
Ransomware & extortionExploits & Zero-Days
Ransomware Spotlight: REvil

Now that the reign of REvil has come to an end, it's time to regroup and strategize. What can organizations learn from REvil’s tactics? We review the rise, downfall, and future of its operations using insights into the group's arsenal and inner inner workings.

December 20th, 2021 9 min read TrendAI™ Research
Read Article
Ransomware & extortion
Ransomware Spotlight: Conti

Assumed to be the successor of the Ryuk ransomware, Conti is currently one of the most notorious active ransomware families used in high-profile attacks. Know all about this ransomware family and protect your company against this threat.

December 1st, 2021 7 min read TrendAI™ Research
Read Article
Cybercriminal underground
Investigating the Emerging Access-as-a-Service Market

We examine an emerging business model that involves access brokers selling direct access to organizations and stolen credentials to other malicious actors.

November 30th, 2021 30 min read TrendAI™ Research
Read Article
Cybercriminal undergroundTargeted attacks
The Far-Reaching Attacks of the Void Balaur Cybermercenary Group

Our research paper takes a close look at the cybermercenary group Void Balaur's services, activities, and targets.

November 10th, 2021 5 min read Feike Hacquebord
Read Article
Cloud securitySoftware supply chain
The Most Common Cloud Misconfigurations That Could Lead to Security Breaches

Using Trend Micro Cloud One™ – Conformity data, we looked at the top 10 Amazon Web Services (AWS) and Microsoft Azure services with the highest misconfiguration rates with regard to the implementation of Cloud Conformity rules.

October 25th, 2021 13 min read TrendAI™ Research
Read Article
Ransomware as a Service: Enabler of Widespread Attacks

Ransomware as a service (RaaS) equips prospective attackers, even those who possess minimal technical skills and knowledge, with the ammunition they need to launch attacks. This in turn helps ransomware spread quickly to more targets. What exactly is RaaS, and which ransomware families and techniques are associated with it?

October 5th, 2021 16 min read Fyodor Yarochkin
Read Article