Sitemap
Resources & Insights
- TrendAI™ Deep Research
- TrendAI™ Security Blog
- #NoFilter: Exposing the Tactics of Instagram Account Hackers
- 2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M
- 2026 H1 APT Report: How APTs Are Weaponizing Trust in the Age of AI
- 500 Million Yahoo Users Affected by Data Breach – Password Change Recommended
- A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services
- A Data-Driven View of Cyber Risk Structure: How Attack Pressure and Exposure Shape Damage
- A Deep Dive Into Kubernetes Threat Modeling
- A Deep Dive into the Packet Reflection Vulnerability Allowing Attackers to Plague Private 5G Networks
- A Deepfake Scammed a Bank out of $25M — Now What?
- A Growing Goldmine: Your LinkedIn Data Abused for Cybercrime
- A Hidden Vulnerability in Healthcare: Exposed DICOM Servers and the Risk to Patient Data
- A Look at Linux: Threats, Risks, and Recommendations
- A Ride on Taiwan’s Self-Driving Bus
- A Shift in the ATM Malware Landscape: From Physical to Network-based Attacks
- Across the Span of the Spanish Cybercriminal Underground: Current Activities and Trends
- Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques
- Agentic AI’s Shadow Pipeline: Mapping the Attack Surface Behind Trusted Workflows
- Agentic Edge AI: Autonomous Intelligence on the Edge
- Agentic Edge AI: Development Tools and Workflows
- AI Assistants in the Future: Security Concerns and Risk Management
- AI in the Crosshairs: Understanding and Detecting Attacks on AWS AI Services with Trend Vision One™
- AI Security Starts Here: The Essentials for Every Organization
- AI Security: NVIDIA BlueField Now with Vision One™
- AI Skills as an Emerging Attack Surface in Critical Sectors: Enhanced Capabilities, New Risks
- AI vs AI: DeepFakes and eKYC
- AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows
- An Invisible Attack Surface: Thousands of Industrial Control Systems Exposed Near Data Centers
- An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps
- Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response
- Analyzing The ForcedEntry Zero-Click iPhone Exploit Used By Pegasus
- Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper
- APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs
- Attacks Against Industrial Machines via Vulnerable Radio Remote Controllers: Security Analysis and Recommendations
- Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads
- Azure Control Plane Threat Detection With TrendAI Vision One™
- Back to Business: Lumma Stealer Returns with Stealthier Methods
- Back to the Hype: An Update on How Cybercriminals Are Using GenAI
- Bashlite Updated with Mining and Backdoor Commands
- Beauty Camera Apps Send Users Porn, Collects Pictures
- BEC Scam Costing Almost US$11 Million Leads to FBI Arrest of Nigerian Businessman
- Behind the Great Wall: Void Arachne Targets Chinese-Speaking Users With the Winos 4.0 C&C Framework
- Best Practices: Identifying and Mitigating Phishing Attacks
- Beware of MCP Hardcoded Credentials: A Perfect Target for Threat Actors
- Billion-Dollar Scams: The Numbers Behind Business Email Compromise
- Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses
- Building Sovereign AI: Technical Considerations for Foundation and Architecture
- Caught in the Crossfire: Defending Devices From Battling Botnets
- Cellular IoT Vulnerabilities: Another Door to Cellular Networks
- CES 2025: A Comprehensive Look at AI Digital Assistants and Their Security Risks
- CISOs in a Pinch: A Security Analysis of OpenClaw
- Cloud Security: Key Concepts, Threats, and Solutions
- Coinminer, DDoS Bot Attack Docker Daemon Ports
- Commodified Cybercrime Infrastructure: Exploring the Underground Services Market for Cybercriminals
- Complexity and Visibility Gaps in Power Automate
- Container Security: Examining Potential Threats to the Container Environment
- Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries
- COVID-19 Used in Malicious Campaigns
- Cracking the Isolation: Novel Docker Desktop VM Escape Techniques Under WSL2
- Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know
- Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks
- Cryptocurrency Miner Uses Hacking Tool Haiduc and App Hider Xhide to Brute Force Machines and Servers
- Cryptocurrency-mining Malware Targets Linux Systems, Uses Rootkit for Stealth
- CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation
- Cyber Considerations for Organizations During Times of Conflict
- Cyberattacks from the Frontlines: Incident Response Playbook for Beginners
- Cybercriminal ‘Cloud of Logs’: The Emerging Underground Business of Selling Access to Stolen Data
- Dark Motives Online: An Analysis of Overlapping Technologies Used by Cybercriminals and Terrorist Organizations
- Data Breaches 101: How They Happen, What Gets Stolen, and Where It All Goes
- Deepfake It ‘til You Make It: A Comprehensive View of the New AI Criminal Toolset
- Delving into the World of Business Email Compromise (BEC)
- Digmine Miner Spreading via Facebook Messenger
- Diving Deep Into Quantum Computing: Computing With Quantum Mechanics
- Do Security Blogs Enable Vibe-Coded Cybercrime?
- Driving Security at the Speed of AI Agents with NVIDIA DOCA
- Earth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign
- Edge Under Siege: How State-Sponsored Actors Exploit Your Perimeter
- Enhancing Software Supply-Chain Security: Navigating SLSA Standards and the MITRE ATT&CK Framework
- Erebus Linux Ransomware: Impact to Servers and Countermeasures
- Estimating Future Risk Outbreaks at Scale in Real-World Deployments
- Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations
- EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks
- Exploiting AI: How Cybercriminals Misuse and Abuse AI and ML
- Exploiting Trust in Open-Source AI: The Hidden Supply Chain Risk No One Is Watching
- Exploring Common Threats to Cloud Security
- Exposing Earth Berberoka: A Multiplatform APT Campaign Targeting Online Gambling Sites
- Fake Banking App Found on Google Play Used in SMiShing
- Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain
- Fake Company, Real Threats: Logs From a Smart Factory Honeypot
- Fake News and Cyber Propaganda: The Use and Abuse of Social Media
- Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities
- Fault Lines in the AI Ecosystem: TrendAI™ State of AI Security Report
- FBI Warns Public on Dangers of the Internet of Things
- Follow the Data: Dissecting Data Breaches and Debunking the Myths
- Forecasting Future Outbreaks: A Behavioral and Predictive Approach to Proactive Cyber Risk Management
- From Anarchy to Authority: Closing the Governance Gap in Agentic AI
- From Defense to Offense: The Misuse of Red Teaming Tools by Cybercriminals
- From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years
- From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers
- From Holiday Snap to Custom Scam in 30 Minutes: How AI Turns Public Photos Into Targeted Attacks
- From LinkedIn to Tailored Attack in 30 Minutes: How AI Accelerates Target Profiling for Cybercrime
- From Stealers to Systems: The New Model of Credential Theft
- From Vulnerable to Resilient: Cutting Ransomware Risk with Proactive Cyber Risk Exposure Management
- Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
- Going Deeper: Exploring the Deep Web
- Gone Phishing: How Phishing Leads to Hacked Accounts and Identity Theft
- Google’s DoubleClick Abused to Deliver Miners
- Governing the Republic of AI Agents: The Framework Your AI Agents Already Need
- Group Behind TrickBot Spreads Fileless BazarBackdoor
- Guarding LLMs With a Layered Prompt Injection Representation
- Guidance on Kubernetes Threat Modeling
- Hacker Infrastructure and Underground Hosting 101:Where Are Cybercriminal Platforms Offered?
- Hacking Tools, Survey Scam Target Facebook Users
- Hidden Scams in Malicious Scans: How to Use QR Codes Safely
- How AiTM Phishing Bypassed MFA to Hijack a Microsoft 365 Mailbox in BEC Scheme
- How BPF-Enabled Malware Works: Bracing for Emerging Threats
- How Cybercriminals Abuse Cloud Tunneling Services
- How Cybercriminals Can Perform Virtual Kidnapping Scams Using AI Voice Cloning Tools and ChatGPT
- How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse
- How TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow
- How Unmanaged AI Adoption Puts Your Enterprise at Risk
- Hunt Them All: An AI-Powered Vulnerability Sweep of 19,000 MCP Servers
- Hype vs. Reality: AI in the Cybercriminal Underground
- In Transit, Interconnected, at Risk: Cybersecurity Risks of Connected Cars
- InfoSec Guide: Domain Monitoring — Detecting Phishing Attacks (Part 1)
- Infrastructure as Code: Security Risks and How to Avoid Them
- Inside SHADOW-WATER-084: A Steganographic Loader-as-a-Service Delivering Remcos, LXBASE, and More
- Inside the Bulletproof Hosting Business: Cybercriminal Methods and OpSec
- Inside the Halls of a Cybercrime Business
- Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It
- Inside the Smart Home: IoT Device Threats and Attack Scenarios
- Introducing the TrendAI™ Agentic Exploit-Remediation Engine: Finding Zero-Day Vulnerabilities at the Speed of AI
- Investigating the Emerging Access-as-a-Service Market
- Invisible Prompt Injection: A Threat to AI Security
- IoT and Ransomware: A Recipe for Disruption
- IoT Security Issues, Threats, and Defenses
- IPFS: A New Data Frontier or a New Cybercriminal Hideout?
- It’s By Design: The Use-After-Free of Azure Cloud
- Kong API Gateway Misconfigurations: An API Gateway Security Case Study
- KOVTER: An Evolving Malware Gone Fileless
- Leaked Today, Exploited for Life: How Social Media Biometric Patterns Affect Your Future
- Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices
- Living Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains
- LLM as a Judge: Evaluating Accuracy in LLM Security Scans
- Locked, Loaded, and in the Wrong Hands: Legitimate Tools Weaponized for Ransomware in 2021
- Loki Info Stealer Propagates through LZH Files
- Lost in Translation: When Industrial Protocol Translation goes Wrong
- Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know
- Malicious Docker Hub Container Images Used for Cryptocurrency Mining
- Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer
- Malicious Script Plagues Over 2,000 WordPress Accounts, Redirects Visitors to Scam Sites
- Malvertising: When Online Ads Attack
- MCP Security: Network-Exposed Servers Are Backdoors to Your Private Data
- Metaworse? The Trouble with the Metaverse
- Misconfigured AWS S3 Bucket Leaks 36,000 Inmate Records
- Modern Bank Heists 2026: The Machine-Speed War for Financial Control
- Modern Ransomware's Double Extortion Tactics and How to Protect Enterprises Against Them
- MQTT and CoAP: Security and Privacy Issues in IoT and IIoT Communication Protocols
- MQTT and M2M: Do You Know Who Owns Your Machine’s Data?
- Nefilim Ransomware Threatens to Expose Stolen Data
- NetWire RAT Hidden in IMG Files Deployed in BEC Campaign
- New AndroRAT Exploits Allow for Permanent Rooting
- New Bait Used in Instagram Profile Hacking Scheme
- New Golang Ransomware Agenda Customizes Attacks
- New LockBit 5.0 Targets Windows, Linux, ESXi
- North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets
- Observability Exposed: Exploring Risks in Cloud-Native Metrics
- Old Vulnerabilities, New AI Era, Amplified Risk: How Outdated Flaws Continue to Fuel the N-Day Exploit Market
- Open RAN: Attack of the xApps
- Operation DRBControl: Uncovering a Cyberespionage Campaign Targeting Gambling Companies in Southeast Asia
- Operation Earth Kitsune: Tracking SLUB’s Current Operations
- Operation Pawn Storm: Fast Facts and the Latest Developments
- Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits
- Over 30 Million Stolen Credit Card Records Being Sold on the Dark Web
- Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
- Pawn Storm Espionage Attacks Use Decoys, Deliver SEDNIT
- PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups
- Post-Quantum Cryptography: Migrating to Quantum Resistant Cryptography
- Proactive Security Insights for SharePoint Attacks (CVE-2025-53770 and CVE-2025-53771)
- Proactive Security: The Role of Exposure Management and Detection-Response Capability
- Probing Pawn Storm: Cyberespionage Campaign Through Scanning, Credential Phishing and More
- Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups
- Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
- Puerto Rico Loses Millions in Email Scam
- PureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading
- Pwning Agentic AI Part I: Your AI Agent Is Already Compromised
- Pwning Agentic AI Part II: When Trusted Agents Do Untrusted Things
- Pwning Agentic AI Part III: Securing Your AI Agent
- Qakbot Resurges, Spreads through VBS Files
- Ranked First on CyberGym: TrendAI™ Agentic Exploit-Remediation Engine Scores 97% on the Top Exploit Benchmark
- Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus
- Ransomware as a Service: Enabler of Widespread Attacks
- Ransomware Double Extortion and Beyond: REvil, Clop, and Conti
- Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted
- Ransomware Spotlight: 8Base
- Ransomware Spotlight: Agenda
- Ransomware Spotlight: Akira
- Ransomware Spotlight: AvosLocker
- Ransomware Spotlight: Black Basta
- Ransomware Spotlight: BlackByte
- Ransomware Spotlight: BlackCat
- Ransomware Spotlight: Clop
- Ransomware Spotlight: Conti
- Ransomware Spotlight: Cuba
- Ransomware Spotlight: DragonForce
- Ransomware Spotlight: Hive
- Ransomware Spotlight: INC
- Ransomware Spotlight: LockBit
- Ransomware Spotlight: Magniber
- Ransomware Spotlight: Play
- Ransomware Spotlight: RansomEXX
- Ransomware Spotlight: Ransomhub
- Ransomware Spotlight: REvil
- Ransomware Spotlight: Rhysida
- Ransomware Spotlight: Royal
- Ransomware Spotlight: TargetCompany
- Ransomware Spotlight: Trigona
- Ransomware Spotlight: Water Ouroboros
- Ransomware: What It Is and How You Can Protect Yourself
- Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores
- Reimagining Fraud Operations: The Rise of AI-Powered Scam Assembly Lines
- Researchers Use Smart Light Bulbs to Infiltrate Networks
- Rogue Robots: Testing the Limits of an Industrial Robot’s Security
- RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits
- Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader
- Securing Sovereign AI: Practical Controls Across Physical, Software, and Model Supply Chains
- Securing the 4 Cs of Cloud-Native Systems: Cloud, Cluster, Container, and Code
- Security 101: Business Email Compromise (BEC) Schemes
- Security 101: How Fileless Attacks Work and Persist in Systems
- Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection)
- Security 101: The Impact of Cryptocurrency-Mining Malware
- Security 101: The Rise of Fileless Threats that Abuse PowerShell
- Security 101: Virtual Patching
- Security in the Era of Industry 4.0: Dealing With Threats to Smart Manufacturing Environments
- Security On-The-Go: Setting up a Virtual Private Network (VPN)
- Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
- Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment
- SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics
- Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems
- SHAREit Flaw Could Lead to Remote Code Execution
- Shedding Light on Security Considerations in Serverless Cloud Architectures
- Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing
- Silent Sabotage: Weaponizing AI Models in Exposed Containers
- Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions
- Slopsquatting: When AI Agents Hallucinate Malicious Packages
- Smart Yet Flawed: IoT Device Vulnerabilities Explained
- Sockpuppeting: How a Single Line Can Bypass LLM Safety Guardrails
- Spear Phishing 101: What is Spear Phishing?
- Stars Don’t Save You: Popularity Is Not Security in the MCP Ecosystem
- Stay Ahead of AI Threats: Secure LLM Applications With Trend Vision One
- Steering Clear of Security Blind Spots: What SOCs Need to Know
- Surging Hype: An Update on the Rising Abuse of GenAI
- TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM
- TeamTNT Activities Probed: Credential Theft, Cryptocurrency Mining, and More
- The AI-fication of Cyberthreats: Trend Micro Security Predictions for 2026
- The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP
- The Architecture Behind $1B: How Customers Run TrendAI Vision One™ on AWS, and Secure Their AI Workloads
- The Attackers Are Already Inside: NERC CIP-015 Is How the Grid Fights Back
- The Cybercriminal Underground: Mapping the Healthcare Data Economy
- The Devil Reviews Xanthorox: A Criminal-Focused Analysis of the Latest Malicious LLM Offering
- The Ever-Evolving Threat of the Russian-Speaking Cybercriminal Underground
- The Far-Reaching Attacks of the Void Balaur Cybermercenary Group
- The Future of Ransomware
- The Future of Social Engineering
- The Gender-Equal Cybercriminal Underground
- The Hidden Risk in Your AI Rollout: Your Endpoints
- The Illusion of Choice: Uncovering Electoral Deceptions in the Age of AI
- The Industrialization of Botnets: Automation and Scale as a New Threat Infrastructure
- The Mirage of AI Programming: Hallucinations and Code Integrity
- The Most Common Cloud Misconfigurations That Could Lead to Security Breaches
- The Next Phase of Cybercrime: Agentic AI and the Shift to Autonomous Criminal Operations
- The Nightmares of Patch Management: The Status Quo and Beyond
- The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns
- The Rise of Residential Proxies as a Cybercrime Enabler
- The Road to Agentic AI: Defining a New Paradigm for Technology and Cybersecurity
- The Road to Agentic AI: Navigating Architecture, Threats, and Solutions
- The Silent Leap: OpenAI’s New ChatGPT Agent Capabilities and Security Risks
- The Speed of AI Is Changing the Vulnerability Landscape. Our Commitment to CISA KEV Isn’t.
- The State of Ransomware: 2020’s Catch-22
- The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables
- The Vulnerability Window Is Closing Quickly: What CISA and Five Eyes Now Say About Public Sector Security
- Threat Attribution Framework: How TrendAI™ Applies Structure Over Speculation
- Threat Modeling API Gateways: A New Target for Threat Actors?
- Threats and Consequences: A Security Analysis of Smart Manufacturing Systems
- TikTok Videos Promise Pirated Apps, Deliver Vidar and StealC Infostealers Instead
- Today’s Cloud and Container Misconfigurations Are Tomorrow’s Critical Vulnerabilities
- Tracking, Detecting, and Thwarting PowerShell-based Malware and Attacks
- Trading in the Dark
- Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations
- TrendAI™ 2026 Cyber Risk Report
- TrendAI™ Advances Threat Hunting to Dynamic, Real-World Exploitation of AI Infrastructure
- TrendAI™ and CleanDNS: From Blocking Attacker Infrastructure to Removing It From the Internet
- TrendAI™ Intelligence Aids Law Enforcement Arrest of Tycoon 2FA Operators
- Trends and Shifts in the Underground N-Day Exploit Market
- U.S. Public Sector Under Siege
- U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026
- UK Power Facility Cyberattack Shutdown: What Critical-Infrastructure Operators and Defenders Need to Know
- Unchaining Blockchain Security Part 3: Exploring the Threats Associated with Private Blockchain Adoption
- Unconventional Attack Surfaces: Identity Replication via Employee Digital Twins
- Uncovering IoT Threats in the Cybercrime Underground
- Uncovering Security Weak Spots in Industry 4.0 CNC Machines
- Understanding Hacktivists: The Overlap of Ideology and Cybercrime
- Unleashing Chaos: Real World Threats Hidden in the DevOps Minefield
- Unmasking Pig-Butchering Scams and Protecting Your Financial Future
- Unmasking Task Scams to Prevent Financial Fallout From Fraud
- Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed
- Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp
- Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers
- Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company
- Unveiling AI Agent Vulnerabilities Part I: Introduction to AI Agent Vulnerabilities
- Unveiling AI Agent Vulnerabilities Part II: Code Execution
- Unveiling AI Agent Vulnerabilities Part III: Data Exfiltration
- Unveiling AI Agent Vulnerabilities Part IV: Database Access Vulnerabilities
- Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services
- Unveiling the Hidden Risks of Industrial Automation Programming
- UNWIRED: Understanding the Unforeseen Risks in Evolving Communication Channels
- Update on Exposed MCP Servers: The Threat Widens to the Cloud
- US Cities Exposed in Shodan
- Using Containers to Secure Your MCP Infrastructure
- Viral AI, Invisible Risks: What OpenClaw Reveals About Agentic Assistants
- Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware
- Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
- Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack
- What Cybercriminals Look For in Corporate Insiders
- What do Hackers do with Your Stolen Identity?
- What We Know About the NPM Supply Chain Attack
- What You Need to Know About the LockerGoga Ransomware
- When Tokenizers Drift: Hidden Costs and Security Risks in LLM Deployments
- Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
- Working From Home? Here’s What You Need for a Secure Setup
- World Backup Day: What, When, Where and Why You Need to Back up and How to do it
- XCSSET Mac Malware: Infects Xcode Projects, Uses 0Days
- Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise
- Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach
- Your Stolen Data for Sale
- ZDI-CAN-25373: Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns
Campaigns
Customer Stories
- Amazon MGM Studios
- AMN Healthcare
- Bechtle
- Copenhagen Airports
- Decathlon
- Dell
- DPCDSB
- Fischer Homes
- Foodstuffs South Island
- Gartner Peer Insights
- Gartner Peer Insights Healthcare and Biotech 5989248
- Generic
- Graybar Canada
- IBM
- Karsan
- Keller ISD
- Kyndryl
- LIC Mutual Fund
- Manufacturing Company
- Max Matthiessen
- MEDCAN
- Northeast Georgia Health System
- Panasonic Holdings Corporation
- PeerSpot
- Peerspot Liauat National Hospital and Medical College
- Plastics Manufacturer
- Real Estate Company
- South Carolina State Library
- South London and Maudsley NHS Foundation Trust
- Step2
- Tech Services Company
- Technoval
- Tondo
- Vodafone
- Weatherford ISD
- Xsolis
- Xsolis ESG