Two Critical PHP flaws leaked before the patch: What organizations should do now.
Ransomware has evolved from an encryption-driven attack into one monetization path within a modular criminal economy, where access to victim environments, not the ransomware payload, is now the core commodity.
TrendAI™ Research analyzed the activities of SHADOW-EARTH-79, an entity abusing the real-time ad-tech bidding process to track and profile individuals in conflict zones, sanctioned states, and other sensitive locations worldwide.
Digital assistants are becoming trusted, capable intermediaries, which inadvertently makes them a powerful new vector for social engineering. This article examines how attackers could exploit an assistant’s knowledge, influence, and ability to act on a user’s behalf.
TrendAI™ Research examines the unique dynamics and factors that influence the adoption of AI in state-aligned APT activity. The report looks into four countries (China, Russia, North Korea, and Iran) to understand why their state-aligned actors adopt AI in the ways that they do.
The Middle Eastern and North African (MENA) underground is characterized by its ironic mix of ideology and felony. We take a look at its inner workings, available wares, and the unique sense of brotherhood shared by its players.
The leading social media platforms have billions of users, and the number keeps getting bigger every year. Learn how to keep your social media accounts secure.
There is no panacea for building a hacker-proof firewall, but there are things that can be done to streamline its management. These best practices provide a starting point for managing your firewall—so you and your company don’t get burned.
Legitimate tools used by IT/system administrators have become valuable cybercriminal targets because of the privilege they provide for greater network access. Here are some best practices for mitigating the abuse of sysadmin tools.
ATM malware has become a mainstay in many cybercriminals’ arsenal due to its capability to steal money. In our joint efforts with Europol’s EC3, we explain in detail how criminals continue to leverage different ATM malware families and attack types.
The use of mobile apps is increasing especially among enterprises. More than ever, developers must work harder to improve the security of the apps they create. Here are some best practices.
Identity theft is currently a gold mine for cybercriminals—one that reached an all-time high in 2016, with up to $16 billion worth of losses caused by fraud and identity theft. But what exactly happens with the stolen information?
This research paper explores the tools and methods used to spread fake news and manipulate public opinion: the services that enable them, their appearance on social media sites, and the motivations behind these activities.
Cities around the world are getting smarter, but are they being designed with security in mind?
A complete discussion of the different vulnerability categories, including case studies of vulnerable SCADA HMIs. The paper also provides a guide for vulnerability researchers, as well as vendors on quick and efficient bug discovery.
October 22nd, 2026
10 min