Two Critical PHP flaws leaked before the patch: What organizations should do now.
Ransomware has evolved from an encryption-driven attack into one monetization path within a modular criminal economy, where access to victim environments, not the ransomware payload, is now the core commodity.
TrendAI™ Research analyzed the activities of SHADOW-EARTH-79, an entity abusing the real-time ad-tech bidding process to track and profile individuals in conflict zones, sanctioned states, and other sensitive locations worldwide.
Digital assistants are becoming trusted, capable intermediaries, which inadvertently makes them a powerful new vector for social engineering. This article examines how attackers could exploit an assistant’s knowledge, influence, and ability to act on a user’s behalf.
TrendAI™ Research examines the unique dynamics and factors that influence the adoption of AI in state-aligned APT activity. The report looks into four countries (China, Russia, North Korea, and Iran) to understand why their state-aligned actors adopt AI in the ways that they do.
Our continued forays into the cybercriminal underground allowed us to see how the tactics and techniques used to attack financial organizations changed over the years.
Radio frequency (RF) technology is being used in operations to control various industrial machines. However, the lack of implemented security in RF communication protocols could lead to production sabotage, system control, and unauthorized access.
We found a wave of MongoLock ransomware attacks that immediately deletes important files upon infection and scans the backup drives for data deletion.
Fileless threats aren’t as visible compared to traditional malware and employ a variety of techniques to stay persistent. Here's a closer look at how fileless malware work and what can be done to thwart them.
We looked into MQTT brokers and CoAP servers around the world to assess IoT protocol security. Learn how to prevent risks and secure machine-to-machine (M2M) communications over MQTT and CoAP in our research.
A Node.js module with nearly two million downloads a week was compromised after the library was injected with malicious code programmed to steal bitcoins in wallet apps.
We recently encountered a cryptocurrency-mining malware affecting Linux systems. It is notable for being bundled with a rootkit component that hides the malicious process’ presence from monitoring tools.
Securing energy and water should remain top priority in the continuing integration of the industrial internet of things in these critical sectors.
To move forward, we need to look into the past to figure out what the best course of action is. Take a trip down memory lane with this infographic to see how far we've come in securing the digital world.
Data breaches take time and a lot of effort to pull off, but successful breaches can affect not just organizations, but also millions of people. Learn what a data breach is, what types of data is usually stolen, and what happens to stolen data.
October 22nd, 2026
10 min