Critical PHP vulnerabilities continue to pose risks. Act now.
In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to businesses on October 9, and the chair of the ruling party’s cybersecurity headquarters described cyberspace as being in a “state of emergency.”
The number of security incidents publicly disclosed in Japan surged from September 2026. This article reviews incidents disclosed from January through September and explains what the data reveals.
TrendAI™ incident response teams have recently investigated multiple attacks on public-facing web servers and databases. This article explains the hardening measures organizations should implement now to protect their web servers.
Ransomware has evolved from an encryption-driven attack into one monetization path within a modular criminal economy, where access to victim environments, not the ransomware payload, is now the core commodity.
The supply and demand for insider threat actors have evolved from isolated opportunism into a structured, thriving criminal market, complete with brokers, recruiters, referral bonuses, guarantor services, and revenue-sharing arrangements. This research examines that market across different industries.
State-aligned threat actors are folding AI into every stage of the attack chain while hiding their infrastructure inside the services defenders already trust. This report unpacks the geopolitics driving the activity and what defenders should prioritize next.
CISA's BOD 26-04 and a new Five Eyes statement highlight the same urgent gaps in vulnerability management. Find out what these developments mean for your security program.
How agentic AI, nation-state actors, and cybercrime-as-a-service are outpacing financial sector defenses, and how defenders can respond at machine speed
AI agents have evolved from tools to autonomous participants in your organization, but governance has not kept pace. TrendAI™ proposes a six-pillar framework built to close that gap.
Governments around the world are committing billions to domestic AI development, but the race to create sovereign AI strategies has outpaced a clear understanding of what sovereignty actually requires. This research offers government and enterprise leaders a practical, layer-by-layer framework for determining how sovereign they need to be, and where it matters most.
As enterprises connect AI agents to cloud infrastructure and production workflows, the cloud-to-agent pipeline is becoming a primary attack surface. This article maps the risks for tech, media, and communications organizations and outlines detection and security best practices.
Return-to-tool isn't theoretical. TrendAI™ Research presents three cases showing exactly how a compromised agent—wielding only its own approved tools—becomes the most dangerous component in the stack.
The 2026 Cyber Risk Report builds on last year's findings with expanded telemetry, providing organizations with the directional insights and data that can be used to help prioritize the exposures that matter most before attackers reach them.
Building on our previous research, we correlated the security issues identified in public MCP servers with metadata crawled from popular directories. We then analyzed whether indicators such as popularity, activity, and vetting serve as reliable metrics to infer the risk of adopting an MCP server.
October 27th, 2026
20 min read