Cyber propagandaGenerative AI
Matryoshka Returns, Targeting US Midterm Candidates With AI-Generated Fake Claims
November 2nd, 20262 min read
Asako Koizumi, Philippe Lin
November 2nd, 2026
2 min read
Read article
TrendAI™
Security Blog
Featured Blogs
BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
November 2nd, 2026 15 min
Read article
Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
October 28th, 2026 6 min
Read article
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
October 22nd, 2026
Read article
Search for research articles
Site search
Filter by:
IoT & smart devices
How to Secure Smart Home IoT Devices, Routers, and Smart Speakers
Smart TVs, smart refrigerators, smart cameras, and other smart devices make life at home convenient, but if left unguarded, they can inadvertently expose homes to risks. This infographic shows basic recommendations for securing these devices.
October 7th, 2021 1 min read
Read Article
Targeted attacks
Zloader Campaigns at a Glance
Our infographic provides a quick and comprehensive overview of Zloader, which has been involved in numerous campaigns over the past few years.
September 29th, 2021 6 min read
Read Article
Analyzing The ForcedEntry Zero-Click iPhone Exploit Used By Pegasus
Citizen Lab has released a report on a new iPhone threat dubbed ForcedEntry. This zero-click exploit seems to be able to circumvent Apple's BlastDoor security, and allow attackers access to a device without user interaction.
September 15th, 2021 5 min read
Read Article
Phishing & BEC
APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs
We have continued tracking APT-C-36, also known as Blind Eagle, since our research on this threat actor in 2019. We share new findings of APT-C-36’s ongoing spam campaign targeting South American entities.
September 13th, 2021 6 min read
Read Article
Malware
Analyzing SSL/TLS Certificates Used by Malware
We take a closer look at the SSL/TLS certificates used by malware.
September 3rd, 2021 4 min read
Read Article
Cryptocurrency
Fake Cryptocurrency Mining Apps Trick Victims Into Watching Ads, Paying for Subscription Service
We recently discovered eight deceptive mobile apps that masquerade as cryptocurrency cloud mining applications where users can earn cryptocurrency by investing money into a cloud-mining operation.
August 18th, 2021 6 min read
Read Article
Chaos Ransomware: A Proof of Concept With Potentially Dangerous Applications
Since June 2021, we’ve been monitoring an in-development ransomware builder called Chaos, which is being offered for testing on an underground forum.
August 10th, 2021 4 min read
Read Article
IoT Security Issues, Threats, and Defenses
As the IoT continues to influence more environments and settings, we review what IoT security is and why it remains essential today.
July 22nd, 2021 9 min read
Read Article
Cyber threats
#NoFilter: Exposing the Tactics of Instagram Account Hackers
What tactics do Instagram account hackers use? What do these cybercriminals do with stolen accounts? How can users protect their accounts? We look into Instagram account hacking incidents from a security researcher’s perspective and share recommendations for users of Instagram and other social media platforms.
July 12th, 2021 9 min read
Read Article
APTsCyber crime
BIOPASS RAT: New Malware Sniffs Victims via Live Streaming
We discovered a new malware that targets online gambling companies in China via a watering hole attack, in which visitors are tricked into downloading a malware loader disguised as a legitimate installer for well-known apps such as Adobe Flash Player or Microsoft Silverlight.
July 9th, 2021 15 min read
Read Article