Cyber propagandaGenerative AI
Matryoshka Returns, Targeting US Midterm Candidates With AI-Generated Fake Claims
November 2nd, 20262 min read
Asako Koizumi, Philippe Lin
November 2nd, 2026
2 min read
Read article
TrendAI™
Security Blog
Featured Blogs
BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
November 2nd, 2026 15 min
Read article
Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
October 28th, 2026 6 min
Read article
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
October 22nd, 2026
Read article
Search for research articles
Site search
Filter by:
Cloud security
Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection)
This article zeroes in on certain security considerations that developers need to know and the ways that they can build the best defense for container-based and serverless applications through runtime application self-protection (also known as RASP).
March 23rd, 2021 7 min read
Read Article
APTs
Earth Vetala – MuddyWater Continues to Target Organizations in the Middle East
Trend Micro researchers recently detected activity suspected to be from MuddyWater. This campaign targets various organizations in the Middle East and neighboring regions.
March 5th, 2021 8 min read
Read Article
Cloud security
Identifying Weak Parts of a Supply Chain
Malicious attacks have consistently been launched on weak points in the supply chain. Like all attacks, these will evolve into more advanced forms. Software development, with multiple phases that could be placed at risk, is particularly vulnerable.
March 3rd, 2021 6 min read
Read Article
SHAREit Flaw Could Lead to Remote Code Execution
We discovered vulnerabilities in the SHAREit application. These vulnerabilities can be abused to leak a user’s sensitive data, execute arbitrary code, and possibly lead to remote code execution. The app has over 1 billion downloads.
February 15th, 2021 5 min read
Read Article
Phishing & BEC
Cybercriminals kick-off 2021 with sweepstakes, credit card, delivery scams
We discuss the behaviors and external indicators of some phishing campaigns that we observed from the latter part of December 2020 to the first weeks of January 2021.
January 21st, 2021 10 min read
Read Article
Phishing & BEC
Phishing Technique Uses Legitimate-looking Domains to Avoid Detection
Cybercriminals use legitimate-looking domains in their phishing-and-scam schemes in an effort to lure more victims and avoid early detection.
December 28th, 2020 3 min read
Read Article
Cyber crime
Negasteal Uses Hastebin for Fileless Delivery of Crysis Ransomware
We discovered a Negasteal variant that uses hastebin to filelessly deliver Crysis ransomware to the victim's system.
December 18th, 2020 3 min read
Read Article
Cyber crimeAPTs
Using MITRE ATT&CK to Identify an APT Attack
We analyzed the tools, relationships, and behaviors used in a long-standing intrusion of a company after its security team observed malicious C&C traffic.
December 15th, 2020 4 min read
Read Article
IoT & smart devices
A Security Guide to IoT-Cloud Convergence
The integration of the IoT and cloud computing poses new possibilities for industries. It is important not to overlook their respective security risks and the measures to take against them when the two technologies converge.
December 10th, 2020 9 min read
Read Article
Exploits & Zero-DaysIoT & smart devices
Securing IoT Apps
Many work-from-home employees use devices for personal and business purposes in home networks that are not as secure as that of the office. This article discusses the threats to unsecure IoT apps and provides ways to secure them.
November 26th, 2020 8 min read
Read Article