Skip to main content

TrendAI™ Ranks #1 on CyberGym with a 97% Exploit-Remediation Score

See why

TrendAI™ Deep Research

spark

Featured Articles

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation
AIOT & critical infrastructure

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation

The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.

September 16th, 2026TrendAI™ Research
Read article
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
IoT & smart devicesASM ASRM
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data

China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.

September 10th, 2026 6 min
Fyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article
An industrial worker inspecting a warehouse
HacktivismRansomware & extortion
Mapping the Criminal Economy Targeting Critical Infrastructure

TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.

September 2nd, 2026 7 min
Mayra Rosario Fuentes, Stephen Hilt, Numaan Huq
Read article
Security 101: Virtual Patching
Exploits & Zero-Days
Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

August 25th, 2026 5 min
TrendAI™ Research
Read article

Search for research articles

Cybercriminal undergroundPhishing & BECDeepfakes
The Ever-Evolving Threat of the Russian-Speaking Cybercriminal Underground

We dive into one of the most sophisticated and impactful ecosystems within the global cybercrime landscape. Our research looks at tools and techniques, specialized forums, popular services, plus a deeply ingrained culture of secrecy and collaboration.

April 8th, 2025 11 min read
Fyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read Article
Cyber crime
From Registries to Private Networks: Threat Scenarios Putting Organizations in Jeopardy

Stolen certificates and private keys could be weaponized by cybercriminals to penetrate a company’s system. Our research investigates how these scenarios would play out, how they affect the organizations, and how to prevent such attacks.

April 2nd, 2025 13 min read Alfredo Oliveira , David Fiser
Read Article
Social engineering
The Future of Social Engineering

Social engineering is a tactic that, at its core, creates a false narrative to exploit a victim’s credulity, greed, curiosity, or any other very human characteristics. Attackers continue to enhance existing social engineering and use new technologies.

March 17th, 2025 13 min read TrendAI™ Research
Read Article
Ransomware & extortion
Ransomware Spotlight: Water Ouroboros

Water Ouroboros (aka Hunters International) is a Ransomware-as-a-Service (RaaS) group that first emerged in October 2023. It is suspected to be a possible spin-off of Hive ransomware, which had its activities disrupted by the Federal Bureau of Investigation (FBI) in January 2023.

March 5th, 2025 6 min read TrendAI™ Research
Read Article
AICloud security
AI in the Crosshairs: Understanding and Detecting Attacks on AWS AI Services with Trend Vision One™

This article offers a fresh perspective on AI security, emphasizing that while core AI models are often the focus, the surrounding infrastructure and cloud services are equally critical to securing AI applications, particularly with the rise of AI-as-a-Service.

February 27th, 2025 22 min read Yash Verma, Sunil Bharti
Read Article
AI
CES 2025: A Comprehensive Look at AI Digital Assistants and Their Security Risks

In this entry, we mapped the capabilities of various AI digital assistants that were showcased at CES 2025 based on an assessment matrix we developed to determine how this emerging technology holds up against potential security threats.

February 10th, 2025 12 min read Vincenzo Ciancaglini, Salvatore Gariuolo, Stephen Hilt, Rainer Vosseler
Read Article
Cyber crime
Metaverse or Metaworse? How the Apple Vision Pro Stacks Up Against Predictions

In 2022, Trend Micro conducted extensive research to understand potential cyber threats to the metaverse amid significant global changes and a growing focus on AI technologies. The release of Apple's Apple Vision Pro headset a year later provided an opportunity to evaluate these predictions, highlighting both advancements and persistent challenges in areas such as data privacy, biometric security, and multi-vendor interoperability.

February 5th, 2025 6 min read Numaan Huq, Roel Reyes
Read Article
Cyber propagandaMalware
Understanding Hacktivists: The Overlap of Ideology and Cybercrime

Hacktivist groups are driven by a political or ideological agenda. In the past, their actions were likened to symbolic, digital graffiti. Nowadays, hacktivist groups resemble urban gangs. Previously composed of low-skilled individuals, these groups have evolved into medium- to high-skill teams, often smaller in size but far more capable.

February 4th, 2025 17 min read David Sancho
Read Article
Cybercriminal underground
Across the Span of the Spanish Cybercriminal Underground: Current Activities and Trends

What does the present state of the Spanish-speaking cybercriminal underground look like? What are the most common scams and other illicit offerings peddled by cybercriminals? Unearth the secrets of the Spanish dark market in our research.

January 30th, 2025 18 min read Mayra Rosario Fuentes, David Sancho
Read Article
Ransomware & extortionRansomware as a Service (RaaS)Cybercriminal underground
Ransomware Spotlight: Ransomhub

RansomHub is a young Ransomware-as-a-Service (RaaS) group tracked by Trend Micro as Water Bakunawa. Despite being a young ransomware group first detected in February 2024, RansomHub moves boldly by targeting larger enterprises more likely to pay ransoms.

December 20th, 2024 TrendAI™ Research
Read Article