Skip to main content

TrendAI™ Ranks #1 on CyberGym with a 97% Exploit-Remediation Score

See why

TrendAI™ Deep Research

spark

Featured Articles

An industrial worker inspecting a warehouse
HacktivismRansomware & extortion

Mapping the Criminal Economy Targeting Critical Infrastructure

TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.

September 2nd, 20267 min read Mayra Rosario Fuentes, Stephen Hilt, Numaan Huq
Read article
Security 101: Virtual Patching
Exploits & Zero-Days
Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

August 25th, 2026 5 min
TrendAI™ Research
Read article
Expert data center IT technician upgrading hardware equipment
AI governance
Securing Sovereign AI: Practical Controls Across Physical, Software, and Model Supply Chains

Sovereign AI places responsibility for every layer of the security stack in the operator's hands, and this article examines the threats that accompany that shift alongside the practical controls that keep nationally owned AI systems trustworthy.

August 11th, 2026
Numaan Huq, David Girard
Read article
An Invisible Attack Surface: Thousands of Industrial Control Systems Exposed Near Data Centers
Cloud security
An Invisible Attack Surface: Thousands of Industrial Control Systems Exposed Near Data Centers

TrendAI™ Research's investigation of ICS protocols near U.S. data centers uncovered thousands of vulnerable devices controlling critical cooling, power, and environmental infrastructure. These systems—designed for operational efficiency, not security—were accessible from the public internet.

August 8th, 2026 43 min
Stephen Hilt, Numaan Huq
Read article

Search for research articles

AI governance
Building Sovereign AI: Technical Considerations for Foundation and Architecture

Governments around the world are committing billions to domestic AI development, but the race to create sovereign AI strategies has outpaced a clear understanding of what sovereignty actually requires. This research offers government and enterprise leaders a practical, layer-by-layer framework for determining how sovereign they need to be, and where it matters most.

July 20th, 2026 Numaan Huq, David Girard
Read Article
AICloud
Agentic AI’s Shadow Pipeline: Mapping the Attack Surface Behind Trusted Workflows

As enterprises connect AI agents to cloud infrastructure and production workflows, the cloud-to-agent pipeline is becoming a primary attack surface. This article maps the risks for tech, media, and communications organizations and outlines detection and security best practices.

July 17th, 2026 TrendAI™ Research
Read Article
AIExploits & Zero-Days
Pwning Agentic AI Part II: When Trusted Agents Do Untrusted Things

Return-to-tool isn't theoretical. TrendAI™ Research presents three cases showing exactly how a compromised agent—wielding only its own approved tools—becomes the most dangerous component in the stack.

July 16th, 2026 13 min read Sean Park
Read Article
Cyber riskThreat reports
TrendAI™ 2026 Cyber Risk Report

The 2026 Cyber Risk Report builds on last year's findings with expanded telemetry, providing organizations with the directional insights and data that can be used to help prioritize the exposures that matter most before attackers reach them.

July 8th, 2026 TrendAI™ Research
Read Article
AIExploits & Zero-Days
Stars Don’t Save You: Popularity Is Not Security in the MCP Ecosystem

Building on our previous research, we correlated the security issues identified in public MCP servers with metadata crawled from popular directories. We then analyzed whether indicators such as popularity, activity, and vetting serve as reliable metrics to infer the risk of adopting an MCP server.

June 24th, 2026 Vincenzo Ciancaglini, Marco Balduzzi, Alfredo Oliveira, David Fiser
Read Article
Cyber threatsOT & critical infrastructure
The Attackers Are Already Inside: NERC CIP-015 Is How the Grid Fights Back

NERC CIP-015 is the first NERC CIP standard to mandate internal network security monitoring for Bulk Electric System environments. Here is what it requires, why OT environments make compliance hard, and how TrendAI™ addresses each obligation.

June 22nd, 2026 Amruta Namjoshi, Bharat Mistry
Read Article
AICyber crime
The Hidden Risk in Your AI Rollout: Your Endpoints

Rethink endpoint security for the AI era. Endpoints now converge users, identities, data, and AI, increasing risk from shadow AI and advanced attacks. This demands stronger visibility, correlation, and resilience.

June 8th, 2026 Dereus Caldwell
Read Article
Targeted attacksCybercriminal underground
The Cybercriminal Underground: Mapping the Healthcare Data Economy

A look inside an industrialized economy where stolen healthcare data is bought, sold, and weaponized, from ransomware breaches to broker access and fake medical documents fueling an expanding criminal supply chain.

June 4th, 2026 Stephen Hilt, Numaan Huq, Mayra Rosario Fuentes
Read Article
A Data-Driven View of Cyber Risk Structure: How Attack Pressure and Exposure Shape Damage

TrendAI™ Research analyzed 2,014 enterprises throughout 2025 and found that cyber damage is shaped by the interaction of attack pressure and exposure, with the highest-risk organizations experiencing up to 3.3 times as much damage as the lowest. The study introduces a Cyber Risk Positioning Map that can help organizations identify whether to prioritize reducing exposure, strengthening response capability, or both.

June 1st, 2026 Bakuei Matsukawa
Read Article
AI
Driving Security at the Speed of AI Agents with NVIDIA DOCA

Agentic AI compresses exploit timelines from weeks to hours, and reactive security can't keep pace. TrendAI™, working with NVIDIA, delivers an isolated trust architecture purpose-built for AI infrastructure, hardening AI factories before attackers find a way in.

June 1st, 2026 TrendAI™ Research
Read Article