Sitemap
Platform
- AI Security
- Cloud Risk Management
- Cloud Security
- Contact
- Cyber Risk Exposure Management
- Data Security
- Deployment Options
- Email Security
- Endpoint Security
- Free Trial
- Identity Security
- Network Security
- On-Premises
- On-Premises Air-Gapped
- Pricing and Licensing
- Regional Public SaaS
- Security Operations
- Sovereign and Private Cloud (SPC)
- Sovereign Cloud
- Threat Intelligence
- TrendAI Vision One
- Workload Security
Resources & Insights
- Compare TrendAI™
- AI Security Brief
- TrendAI™ Deep Research
- TrendAI™ Security Blog
- vs. CrowdStrike
- vs. Microsoft
- vs. Palo Alto
- vs. SentinelOne
- “Twin Flower” Campaign Jacks Up Network Traffic, Downloads Files, Steals Data
- #NoFilter: Exposing the Tactics of Instagram Account Hackers
- 2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M
- 2020 Report: ICS Endpoints as Starting Points for Threats
- 2026 H1 APT Report: How APTs Are Weaponizing Trust in the Age of AI
- 3 Indonesian Hackers Arrested for Global Magecart Attacks, Other Members Still at Large
- 500 Million Yahoo Users Affected by Data Breach – Password Change Recommended
- 5G and Aviation: A Look Into Security and Technology Upgrades Working in Tandem
- A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services
- A Data-Driven View of Cyber Risk Structure: How Attack Pressure and Exposure Shape Damage
- A Deep Dive Into Kubernetes Threat Modeling
- A Deep Dive into the Packet Reflection Vulnerability Allowing Attackers to Plague Private 5G Networks
- A Deepfake Scammed a Bank out of $25M — Now What?
- A Growing Goldmine: Your LinkedIn Data Abused for Cybercrime
- A Hidden Vulnerability in Healthcare: Exposed DICOM Servers and the Risk to Patient Data
- A Look at Linux: Threats, Risks, and Recommendations
- A Ride on Taiwan’s Self-Driving Bus
- A Roadmap to Secure Connected Cars: Charting the WP.29's UN Regulation No. 155
- A Security Guide to IoT-Cloud Convergence
- A Shift in the ATM Malware Landscape: From Physical to Network-based Attacks
- Abusing Argo CD, Helm, and Artifact Hub: An Analysis of Supply Chain Attacks in Cloud-Native Applications
- Across the Span of the Spanish Cybercriminal Underground: Current Activities and Trends
- Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C
- Addressing CAPTCHA-Evading Phishing Threats With Behavior-Based AI Protection
- Addressing Cloud-Related Threats to the IoT
- Addressing Threats Like Ryuk via Trend Micro XDR
- Aftershocks: The Hidden Cost of Speed at Scale — 1H 2026 State of AI Security
- Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques
- Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script
- Agentic AI’s Shadow Pipeline: Mapping the Attack Surface Behind Trusted Workflows
- Agentic Edge AI: Autonomous Intelligence on the Edge
- Agentic Edge AI: Development Tools and Workflows
- AI and the Evolving Threat Landscape: What Public Sector CISOs Need to Know Now
- AI Assistants in the Future: Security Concerns and Risk Management
- AI Frontier Labs Can Slow Down. Defenders Can’t Afford To.
- AI in the Crosshairs: Understanding and Detecting Attacks on AWS AI Services with Trend Vision One™
- AI Security Starts Here: The Essentials for Every Organization
- AI Security: NVIDIA BlueField Now with Vision One™
- AI Skills as an Emerging Attack Surface in Critical Sectors: Enhanced Capabilities, New Risks
- AI vs AI: DeepFakes and eKYC
- AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows
- AIxploit: From Lucky Phrasing to a Map of the Attack Surface
- An Analysis of Azure Managed Identities Within Serverless Environments
- An Invisible Attack Surface: Thousands of Industrial Control Systems Exposed Near Data Centers
- An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps
- Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response
- Analyzing the Data Distribution Service (DDS) Protocol for Critical Industries
- Analyzing The ForcedEntry Zero-Click iPhone Exploit Used By Pegasus
- Analyzing the Risks of Using Environment Variables for Serverless Management
- Analyzing the Risks of Using Environmental Variables for Managing Serverless Environments
- Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper
- Apache APISIX In-the-wild Exploitations: An API Gateway Security Study
- Application Security 101
- APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs
- Assess Your AI Security Maturity Through Visibility, Observability, Ownership, and Governance
- ATF Reports Breach After Qilin Leak Site Appearance: Insights from TrendAI™
- Attacks Against Industrial Machines via Vulnerable Radio Remote Controllers: Security Analysis and Recommendations
- Australian Health Insurance-Themed Spam Spreads Ursnif
- AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT
- Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads
- Azure Control Plane Threat Detection With TrendAI Vision One™
- Back to Business: Lumma Stealer Returns with Stealthier Methods
- Back to the Hype: An Update on How Cybercriminals Are Using GenAI
- Bashlite Updated with Mining and Backdoor Commands
- Beauty Camera Apps Send Users Porn, Collects Pictures
- BEC Scam Costing Almost US$11 Million Leads to FBI Arrest of Nigerian Businessman
- Behind the Great Wall: Void Arachne Targets Chinese-Speaking Users With the Winos 4.0 C&C Framework
- Best Practices: Identifying and Mitigating Phishing Attacks
- Beware of MCP Hardcoded Credentials: A Perfect Target for Threat Actors
- Beyond Model Alignment: Securing Every Layer of the AI Agent
- Billion-Dollar Scams: The Numbers Behind Business Email Compromise
- Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601
- BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets
- Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses
- Bridging Divides, Transcending Borders: The Current State of the English Underground
- Bridging Security Gaps in WFH and Hybrid Setups
- Building Resilience: 2024 Security Predictions for the Cloud
- Building Sovereign AI: Technical Considerations for Foundation and Architecture
- Can You Rely on OTPs? A Study of SMS PVA Services and Their Possible Criminal Uses
- Caught in the Crossfire: Defending Devices From Battling Botnets
- Cellular IoT Vulnerabilities: Another Door to Cellular Networks
- CES 2025: A Comprehensive Look at AI Digital Assistants and Their Security Risks
- CISOs in a Pinch: A Security Analysis of OpenClaw
- Cloud Security: Key Concepts, Threats, and Solutions
- Coinminer, DDoS Bot Attack Docker Daemon Ports
- Coinminers Exploit SaltStack Vulnerabilities CVE-2020-11651 and CVE-2020-11652
- Commodified Cybercrime Infrastructure: Exploring the Underground Services Market for Cybercriminals
- Complexity and Visibility Gaps in Power Automate
- Connecting Taidoor’s Dots: Earth Aughisky Over The Last 10 Years
- Container Security: Examining Potential Threats to the Container Environment
- Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries
- COVID-19 Used in Malicious Campaigns
- Cracking the Isolation: Novel Docker Desktop VM Escape Techniques Under WSL2
- Crafting an Azure App Services Threat Model
- Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation
- Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet
- Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know
- Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks
- Cryptocurrency Miner Uses Hacking Tool Haiduc and App Hider Xhide to Brute Force Machines and Servers
- Cryptocurrency-mining Malware Targets Linux Systems, Uses Rootkit for Stealth
- Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem
- CSO Insights: DataBank’s Mark Houpt on Looking Beyond Securing Infrastructures in the New Normal
- CSO Insights: Liggett Consulting’s Mark Liggett on Connectivity and Visibility in Securing Remote Work
- CSO Insights: Ricoh USA’s David Levine on Employing a Cloud- and Cybersecurity-First Strategy
- CSO Insights: SBV’s Ian Keller on the Challenges and Opportunities of Working Remotely
- CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign
- CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits
- CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks
- CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation
- Cyber Considerations for Organizations During Times of Conflict
- Cyberattacks from the Frontlines: Incident Response Playbook for Beginners
- Cybercrime Group Uses G Suite, Physical Checks in BEC Scam
- Cybercriminal ‘Cloud of Logs’: The Emerging Underground Business of Selling Access to Stolen Data
- Cybercriminals Gamble With Victims' Livelihoods To Pass the Covid-19 Blues
- Cybercriminals kick-off 2021 with sweepstakes, credit card, delivery scams
- Cybersecurity Under Strain of SecOps Pain Points
- Dark Motives Online: An Analysis of Overlapping Technologies Used by Cybercriminals and Terrorist Organizations
- Data Breaches 101: How They Happen, What Gets Stolen, and Where It All Goes
- Data of U.K. Train Commuters Leak from Misconfigured AWS Cloud Storage
- Deepfake It ‘til You Make It: A Comprehensive View of the New AI Criminal Toolset
- Delving into the World of Business Email Compromise (BEC)
- Digmine Miner Spreading via Facebook Messenger
- Distributed Energy Generation Gateway (In)Security
- Diving Deep Into Quantum Computing: Computing With Quantum Mechanics
- Diving Deep Into Quantum Computing: Modern Cryptography
- Diving Into End-to-End Deep Learning for Cybersecurity
- Do Security Blogs Enable Vibe-Coded Cybercrime?
- Docker Content Trust: What It Is and How It Secures Container Images
- Driving Security at the Speed of AI Agents with NVIDIA DOCA
- Dymalloy, Electrum, and Xenotime Hacking Groups Set Their Targets on US Energy Sector
- Dynamic Challenges to Threat Detection and Endpoint Security — And How to Overcome Them
- Earth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign
- Earth Kurma APT Campaign Targets Southeast Asian Government, Telecom Sectors
- Earth Lamia Develops Custom Arsenal to Target Multiple Industries
- Earth Simnavaz (aka APT34) Levies Advanced Cyberattacks Against Middle East
- Earth Sirrush: A Russia-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling
- Edge Under Siege: How State-Sponsored Actors Exploit Your Perimeter
- Emotet Now Spreads via Wi-Fi
- Emotet Uses Coronavirus Scare in Latest Campaign, Targets Japan
- Enhancing Software Supply-Chain Security: Navigating SLSA Standards and the MITRE ATT&CK Framework
- Erebus Linux Ransomware: Impact to Servers and Countermeasures
- Estimating Future Risk Outbreaks at Scale in Real-World Deployments
- Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations
- EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks
- Examining Erratic Modern Ransomware Activities: Ransomware in Q3 2021
- Excel Files with Hidden Sheets Target Users in Italy
- Exploiting AI: How Cybercriminals Misuse and Abuse AI and ML
- Exploiting Trust in Open-Source AI: The Hidden Supply Chain Risk No One Is Watching
- Exploring Common Threats to Cloud Security
- Exploring Potential Security Challenges in Microsoft Azure
- Exposed Container Registries: A Potential Vector for Supply-Chain Attacks
- Exposing Earth Berberoka: A Multiplatform APT Campaign Targeting Online Gambling Sites
- Fake Banking App Found on Google Play Used in SMiShing
- Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain
- Fake Company, Real Threats: Logs From a Smart Factory Honeypot
- Fake Dating Apps Found as Top Source of Malware in Africa
- Fake Messaging App Installers Promoted on Fraudulent Download Sites, Target Russian Users
- Fake News and Cyber Propaganda: The Use and Abuse of Social Media
- Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities
- Fault Lines in the AI Ecosystem: TrendAI™ State of AI Security Report
- FBI Warns Public on Dangers of the Internet of Things
- Follow the Data: Dissecting Data Breaches and Debunking the Myths
- Forecasting Future Outbreaks: A Behavioral and Predictive Approach to Proactive Cyber Risk Management
- From Anarchy to Authority: Closing the Governance Gap in Agentic AI
- From Bounty to Exploit: Cybercriminals Use Crowdsourcing for New Attacks
- From Defense to Offense: The Misuse of Red Teaming Tools by Cybercriminals
- From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years
- From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers
- From Holiday Snap to Custom Scam in 30 Minutes: How AI Turns Public Photos Into Targeted Attacks
- From LinkedIn to Tailored Attack in 30 Minutes: How AI Accelerates Target Profiling for Cybercrime
- From Registries to Private Networks: Threat Scenarios Putting Organizations in Jeopardy
- From State AI Ecosystems to Global APT Cyberthreats
- From Stealers to Systems: The New Model of Credential Theft
- From Vulnerable to Resilient: Cutting Ransomware Risk with Proactive Cyber Risk Exposure Management
- Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
- Generative AI in Elections: Beyond Political Disruption
- GitHub Action Runners: Analyzing the Environment and Security in Action
- Global Public Sector Under Siege: Threat Intelligence for Q2 2026
- Going Deeper: Exploring the Deep Web
- Gone Phishing: How Phishing Leads to Hacked Accounts and Identity Theft
- Google, Mozilla Crack Down on Malicious Extensions and Add-ons
- Google’s DoubleClick Abused to Deliver Miners
- Governing the Republic of AI Agents: The Framework Your AI Agents Already Need
- Group Behind TrickBot Spreads Fileless BazarBackdoor
- Guarding AI Models From Malicious Alterations in the AI PC Era
- Guarding LLMs With a Layered Prompt Injection Representation
- Guidance on Kubernetes Threat Modeling
- Hacker Infrastructure and Underground Hosting 101:Where Are Cybercriminal Platforms Offered?
- Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices
- Hacking Tools, Survey Scam Target Facebook Users
- Hidden Scams in Malicious Scans: How to Use QR Codes Safely
- How AI-Native Development Platforms Enable Fake Captcha Pages
- How AiTM Phishing Bypassed MFA to Hijack a Microsoft 365 Mailbox in BEC Scheme
- How BPF-Enabled Malware Works: Bracing for Emerging Threats
- How Cybercriminals Abuse Cloud Tunneling Services
- How Cybercriminals Can Perform Virtual Kidnapping Scams Using AI Voice Cloning Tools and ChatGPT
- How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse
- How to Secure Smart Home IoT Devices, Routers, and Smart Speakers
- How to Secure Video Conferencing Apps
- How TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow
- How Unmanaged AI Adoption Puts Your Enterprise at Risk
- Hunt Them All: An AI-Powered Vulnerability Sweep of 19,000 MCP Servers
- Hype vs. Reality: AI in the Cybercriminal Underground
- Identifying Weak Parts of a Supply Chain
- In Transit, Interconnected, at Risk: Cybersecurity Risks of Connected Cars
- Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics
- Influential Facebook Brand Pages Stolen via Credential Phishing
- InfoSec Guide: Domain Monitoring — Detecting Phishing Attacks (Part 1)
- Infrastructure as Code: Security Risks and How to Avoid Them
- Inside SHADOW-WATER-084: A Steganographic Loader-as-a-Service Delivering Remcos, LXBASE, and More
- Inside the Bulletproof Hosting Business: Cybercriminal Methods and OpSec
- Inside the Halls of a Cybercrime Business
- Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It
- Inside the Smart Home: IoT Device Threats and Attack Scenarios
- Introducing the TrendAI™ Agentic Exploit-Remediation Engine: Finding Zero-Day Vulnerabilities at the Speed of AI
- Investigating the Emerging Access-as-a-Service Market
- Investigation into a Nefilim Attack Shows Signs of Lateral Movement, Possible Data Exfiltration
- Invisible Prompt Injection: A Threat to AI Security
- IoT and Ransomware: A Recipe for Disruption
- IoT Security Issues, Threats, and Defenses
- IPFS: A New Data Frontier or a New Cybercriminal Hideout?
- Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting
- ISO/SAE 21434: Securing Tomorrow's Connected Cars
- It’s By Design: The Use-After-Free of Azure Cloud
- Keeping a Close Watch: Trend Micro Specialized Cybersecurity Report for Latin America and the Caribbean
- Keeping Cyber Risk Under Control: Spotting and Thwarting ICS Threats
- Kong API Gateway Misconfigurations: An API Gateway Security Case Study
- KOVTER: An Evolving Malware Gone Fileless
- Leaked Today, Exploited for Life: How Social Media Biometric Patterns Affect Your Future
- Leaky Labels: Bypassing Traefik Proxy Leveraging cAdvisor Metrics
- Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails
- Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices
- Lessons in Resilience from the Race to Patch SharePoint Vulnerabilities
- Linux Threat Report 2021 1H: Linux Threats in the Cloud and Security Recommendations
- Living Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains
- LLM as a Judge: Evaluating Accuracy in LLM Security Scans
- LockBit and Black Basta Are the Most Active RaaS Groups as Victim Count Rises: Ransomware in Q2 and Q3 2022
- LockBit, BlackCat, and Clop Prevail as Top RAAS Groups: Ransomware in 1H 2023
- LockBit, BlackCat, and Royal Dominate the Ransomware Scene: Ransomware in Q4 2022
- LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022
- Locked, Loaded, and in the Wrong Hands: Legitimate Tools Weaponized for Ransomware in 2021
- Loki Info Stealer Propagates through LZH Files
- Looking Into the Void: Probing a Top Bulletproof Hosting Service
- Lost in Translation: When Industrial Protocol Translation goes Wrong
- Malicious Actors Target Comm Apps such as Zoom, Slack, Discord
- Malicious Chrome Extensions, Domains Used to Steal User Data
- Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know
- Malicious Docker Hub Container Images Used for Cryptocurrency Mining
- Malicious Domains and Files Related to Zoom Increase, ‘Zoom Bombing’ on the Rise
- Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer
- Malicious Script Plagues Over 2,000 WordPress Accounts, Redirects Visitors to Scam Sites
- Malicious Spam Campaign Targets South Korean Users
- Malvertising: When Online Ads Attack
- Mapping the Criminal Economy Targeting Critical Infrastructure
- Maze Ransomware Attacks US IT Firm
- MCP Security: Network-Exposed Servers Are Backdoors to Your Private Data
- Metaverse or Metaworse? How the Apple Vision Pro Stacks Up Against Predictions
- Metaworse? The Trouble with the Metaverse
- Microsoft Alerts Users About Critical Font-related Remote Code Execution Vulnerability in Windows
- Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided
- Millions of IoT Devices Affected by Ripple20 Vulnerabilities
- Minding the Gaps: The State of Vulnerabilities in Cloud Native Applications
- Mining Through Mountains of Information and Risk: Containers and Exposed Container Registries
- Mirai Updates: New Variant Mukashi Targets NAS Devices, New Vulnerability Exploited in GPON Routers, UPX-Packed FBot
- Misconfigured AWS S3 Bucket Leaks 36,000 Inmate Records
- Misconfigured Docker Daemon API Ports Attacked for Kinsing Malware Campaign
- Mispadu Banking Trojan Resurfaces
- Mitigating the Threat of Sidecar Container Injection
- Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts
- Modern Bank Heists 2026: The Machine-Speed War for Financial Control
- Modern Ransomware Shakes Up Banking, Government, Transportation Sectors in 1H 2021
- Modern Ransomware's Double Extortion Tactics and How to Protect Enterprises Against Them
- MQTT and CoAP: Security and Privacy Issues in IoT and IIoT Communication Protocols
- MQTT and M2M: Do You Know Who Owns Your Machine’s Data?
- Navigating Gray Clouds: The Importance of Visibility in Cloud Security
- Navigating the Threat Landscape for Cloud-Based GPUs
- Nefilim Ransomware Threatens to Expose Stolen Data
- Negasteal Uses Hastebin for Fileless Delivery of Crysis Ransomware
- Nemty Ransomware Spreads via Love Letter Emails
- NetWire RAT Hidden in IMG Files Deployed in BEC Campaign
- New AndroRAT Exploits Allow for Permanent Rooting
- New Bait Used in Instagram Profile Hacking Scheme
- New Extortion Campaign Threatens Victims of the 2015 Ashley Madison Breach
- New Golang Ransomware Agenda Customizes Attacks
- New LockBit 5.0 Targets Windows, Linux, ESXi
- New Mimic Ransomware Abuses Everything APIs for its Encryption Process
- No Entry: How Attackers Can Sneak Past Facial Recognition Devices
- North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets
- Observability Exposed: Exploring Risks in Cloud-Native Metrics
- Old Vulnerabilities, New AI Era, Amplified Risk: How Outdated Flaws Continue to Fuel the N-Day Exploit Market
- Online Dating Websites Lure Japanese Customers to Scams
- Open RAN: Attack of the xApps
- OpenClaw Security Analysis: The Unseen Risks of Agentic AI
- Operation DRBControl: Uncovering a Cyberespionage Campaign Targeting Gambling Companies in Southeast Asia
- Operation Earth Kitsune: Tracking SLUB’s Current Operations
- Operation Pawn Storm: Fast Facts and the Latest Developments
- Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits
- Over 30 Million Stolen Credit Card Records Being Sold on the Dark Web
- Patch List: Adobe, Citrix, Intel, and vBulletin Vulns
- Patch Now: F5 Vulnerability with CVSS 10 Severity Score
- Patched Microsoft Access ‘MDB Leaker’ (CVE-2019-1463) Exposes Sensitive Data in Database Files
- Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
- Pawn Storm Espionage Attacks Use Decoys, Deliver SEDNIT
- PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups
- Phishing Site Uses Netflix as Lure, Employs Geolocation
- Phishing Technique Uses Legitimate-looking Domains to Avoid Detection
- Phobos Emerges as a Formidable Threat in Q1 2024, LockBit Stays in the Top Spot: Ransomware in Q1 2024
- PII Leaks and Other Risks From Unsecure E-Commerce APIs
- Post-Quantum Cryptography: Migrating to Quantum Resistant Cryptography
- Post-Quantum Cryptography: Quantum Computing Attacks on Classical Cryptography
- PowerGhost Spreads Beyond Windows Devices, Haunts Linux Machines
- Preempting Threats to Connected Cars: The Importance of Cybersecurity in a Data-Driven Automotive Ecosystem
- Prescription for Risk: The Cybersecurity Hazards of GenAI in Healthcare
- Preventing an Imminent Ransomware Attack With Early Detection and Investigation
- Proactive Security Insights for SharePoint Attacks (CVE-2025-53770 and CVE-2025-53771)
- Proactive Security: The Role of Exposure Management and Detection-Response Capability
- Probing Pawn Storm: Cyberespionage Campaign Through Scanning, Credential Phishing and More
- Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups
- Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
- Protecting Your Krew: A Security Analysis of kubectl Plug-ins
- Puerto Rico Loses Millions in Email Scam
- PureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading
- Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet
- Pwning Agentic AI Part I: Your AI Agent Is Already Compromised
- Pwning Agentic AI Part II: When Trusted Agents Do Untrusted Things
- Pwning Agentic AI Part III: Securing Your AI Agent
- Qakbot Resurges, Spreads through VBS Files
- Ranked First on CyberGym: TrendAI™ Agentic Exploit-Remediation Engine Scores 97% on the Top Exploit Benchmark
- Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus
- Ransomware as a Service: Enabler of Widespread Attacks
- Ransomware Double Extortion and Beyond: REvil, Clop, and Conti
- Ransomware Hits U.S. Electric Utility
- Ransomware Recap: Clop, DeathRansom, and Maze Ransomware
- Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted
- Ransomware Spotlight: 8Base
- Ransomware Spotlight: Agenda
- Ransomware Spotlight: Akira
- Ransomware Spotlight: AvosLocker
- Ransomware Spotlight: Black Basta
- Ransomware Spotlight: BlackByte
- Ransomware Spotlight: BlackCat
- Ransomware Spotlight: Clop
- Ransomware Spotlight: Conti
- Ransomware Spotlight: Cuba
- Ransomware Spotlight: DragonForce
- Ransomware Spotlight: Hive
- Ransomware Spotlight: INC
- Ransomware Spotlight: LockBit
- Ransomware Spotlight: Magniber
- Ransomware Spotlight: Play
- Ransomware Spotlight: RansomEXX
- Ransomware Spotlight: Ransomhub
- Ransomware Spotlight: REvil
- Ransomware Spotlight: Rhysida
- Ransomware Spotlight: Royal
- Ransomware Spotlight: TargetCompany
- Ransomware Spotlight: Trigona
- Ransomware Spotlight: Water Ouroboros
- Ransomware: What It Is and How You Can Protect Yourself
- Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores
- Reimagining Fraud Operations: The Rise of AI-Powered Scam Assembly Lines
- Reinforcing NAS Security Against Pivoting Threats
- Researchers Use Smart Light Bulbs to Infiltrate Networks
- Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
- Return to Sender: Preventing Ransomware While Working From Home
- Rise in Active RaaS Groups Parallel Growing Victim Counts: Ransomware in 2H 2023
- Rising From the Underground: Hacktivism in 2024
- Rising Security Weaknesses in the Automotive Industry and What It Can Do on the Road Ahead
- Rogue Robots: Testing the Limits of an Industrial Robot’s Security
- RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits
- Russian Group Cosmic Lynx Launches Over 200 BEC Campaigns
- Russian Investigators Bust Credit Card Fraud Ring
- Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader
- Safe and Smart Connections: Securing IoT Networks for Remote Setups
- Scarecrow: Making the Attacker’s AI Say No
- Securing Cloud-Native Environments with Zero Trust: Real-World Attack Cases
- Securing Enterprise Security: How to Manage the New Generation of Access Control Devices
- Securing IoT Apps
- Securing Sovereign AI: Practical Controls Across Physical, Software, and Model Supply Chains
- Securing the 4 Cs of Cloud-Native Systems: Cloud, Cluster, Container, and Code
- Security 101: Business Email Compromise (BEC) Schemes
- Security 101: How Fileless Attacks Work and Persist in Systems
- Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection)
- Security 101: The Impact of Cryptocurrency-Mining Malware
- Security 101: The Rise of Fileless Threats that Abuse PowerShell
- Security 101: Virtual Patching
- Security for Entertainment IoT
- Security for the Next-Generation Retail Supply Chain
- Security in the Era of Industry 4.0: Dealing With Threats to Smart Manufacturing Environments
- Security On-The-Go: Setting up a Virtual Private Network (VPN)
- Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
- Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment
- SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics
- Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems
- SHAREit Flaw Could Lead to Remote Code Execution
- Shedding Light on Security Considerations in Serverless Cloud Architectures
- Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing
- ShinyHunters Returns to PeopleSoft With a One-Character WAF Bypass
- Silent Sabotage: Weaponizing AI Models in Exposed Containers
- Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions
- Slopsquatting: When AI Agents Hallucinate Malicious Packages
- Smart Yet Flawed: IoT Device Vulnerabilities Explained
- SocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware
- Sockpuppeting: How a Single Line Can Bypass LLM Safety Guardrails
- Sodinokibi Ransomware Increases Yearend Activity, Targets Airport and Other Businesses
- SORA and UNSTABLE: 2 Mirai Variants Target Video Surveillance Storage Systems
- Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities
- Spear Phishing 101: What is Spear Phishing?
- Stars Don’t Save You: Popularity Is Not Security in the MCP Ecosystem
- Stay Ahead of AI Threats: Secure LLM Applications With Trend Vision One
- Steering Clear of Security Blind Spots: What SOCs Need to Know
- Supply Chain Attacks in the Age of Cloud Computing: Risks, Mitigations, and the Importance of Securing Back Ends
- Surging Hype: An Update on the Rising Abuse of GenAI
- TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM
- TeamTNT Activities Probed: Credential Theft, Cryptocurrency Mining, and More
- Texas School District Loses $2.3 Million to Phishing Scam, BEC
- The AI-fication of Cyberthreats: Trend Micro Security Predictions for 2026
- The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP
- The Architecture Behind $1B: How Customers Run TrendAI Vision One™ on AWS, and Secure Their AI Workloads
- The Attackers Are Already Inside: NERC CIP-015 Is How the Grid Fights Back
- The Basics of Keeping Kubernetes Cluster Secure: Worker Nodes and Related Components
- The Basics of Keeping Kubernetes Clusters Secure
- The Boardroom Debate: How Cyber Risk Hits Your Bottom Line
- The Crypto-Monetized Web: A Forward-Looking Thought Experiment
- The Cybercriminal Underground: Mapping the Healthcare Data Economy
- The Cybersecurity Blind Spots of Connected Cars
- The Devil Reviews Xanthorox: A Criminal-Focused Analysis of the Latest Malicious LLM Offering
- The Enterprise Guide to Governing Autonomous AI Agents
- The Ever-Evolving Threat of the Russian-Speaking Cybercriminal Underground
- The Evolution of Windows Kernel Threats
- The Far-Reaching Attacks of the Void Balaur Cybermercenary Group
- The Future of Ransomware
- The Future of Social Engineering
- The Future of Whaling Attacks: AI-Powered Harpoon Whaling
- The Gender-Equal Cybercriminal Underground
- The Hidden Risk in Your AI Rollout: Your Endpoints
- The Illusion of Choice: Uncovering Electoral Deceptions in the Age of AI
- The Industrialization of Botnets: Automation and Scale as a New Threat Infrastructure
- The Mirage of AI Programming: Hallucinations and Code Integrity
- The Most Common Cloud Misconfigurations That Could Lead to Security Breaches
- The Next Phase of Cybercrime: Agentic AI and the Shift to Autonomous Criminal Operations
- The Nightmares of Patch Management: The Status Quo and Beyond
- The Realities of Quantum Machine Learning
- The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns
- The Rise of Residential Proxies as a Cybercrime Enabler
- The Road to Agentic AI: Defining a New Paradigm for Technology and Cybersecurity
- The Road to Agentic AI: Navigating Architecture, Threats, and Solutions
- The Silent Leap: OpenAI’s New ChatGPT Agent Capabilities and Security Risks
- The Speed of AI Is Changing the Vulnerability Landscape. Our Commitment to CISA KEV Isn’t.
- The State of Ransomware: 2020’s Catch-22
- The Transition to 5G: Security Implications of Campus Networks
- The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables
- The Vulnerability Window Is Closing Quickly: What CISA and Five Eyes Now Say About Public Sector Security
- Threat Actors Abuse Evernote, Other Shared Platforms for Credential Phishing
- Threat Actors Deliver Courier-Themed Spam Campaign with Attached ACE Files
- Threat Attribution Framework: How TrendAI™ Applies Structure Over Speculation
- Threat Modeling API Gateways: A New Target for Threat Actors?
- Threat Recap: Darkside, Crysis, Negasteal, Coinminer
- Threats and Consequences: A Security Analysis of Smart Manufacturing Systems
- Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites
- TikTok Videos Promise Pirated Apps, Deliver Vidar and StealC Infostealers Instead
- Today’s Cloud and Container Misconfigurations Are Tomorrow’s Critical Vulnerabilities
- Tracking, Detecting, and Thwarting PowerShell-based Malware and Attacks
- Trading in the Dark
- Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations
- TrendAI™ 2026 Cyber Risk Report
- TrendAI™ Advances Threat Hunting to Dynamic, Real-World Exploitation of AI Infrastructure
- TrendAI™ and CleanDNS: From Blocking Attacker Infrastructure to Removing It From the Internet
- TrendAI™ Brings OpenAI's GPT Cyber Models Into the Race to Shrink Exposure Time to Zero
- TrendAI™ Intelligence Aids Law Enforcement Arrest of Tycoon 2FA Operators
- Trends and Shifts in the Underground N-Day Exploit Market
- U.S. Public Sector Under Siege
- U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026
- UK Power Facility Cyberattack Shutdown: What Critical-Infrastructure Operators and Defenders Need to Know
- Unchaining Blockchain Security Part 3: Exploring the Threats Associated with Private Blockchain Adoption
- Unconventional Attack Surfaces: Identity Replication via Employee Digital Twins
- Uncovering IoT Threats in the Cybercrime Underground
- Uncovering Risks in Ordinary Places: A Look at the IoT Threat Landscape
- Uncovering Security Weak Spots in Industry 4.0 CNC Machines
- Uncovering Silent Threats in Azure Machine Learning Service: Part 2
- Uncovering Silent Threats in Azure Machine Learning Service: Part I
- Understanding Hacktivists: The Overlap of Ideology and Cybercrime
- Understanding Ransomware Using Data Science
- Understanding the Kubernetes Security Triad: Image Scanning, Admission Controllers, and Runtime Security
- Undertaking Security Challenges in Hybrid Cloud Environments
- Unleashing Chaos: Real World Threats Hidden in the DevOps Minefield
- Unmasking Pig-Butchering Scams and Protecting Your Financial Future
- Unmasking Task Scams to Prevent Financial Fallout From Fraud
- Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed
- Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp
- Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers
- Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company
- Unveiling AI Agent Vulnerabilities Part I: Introduction to AI Agent Vulnerabilities
- Unveiling AI Agent Vulnerabilities Part II: Code Execution
- Unveiling AI Agent Vulnerabilities Part III: Data Exfiltration
- Unveiling AI Agent Vulnerabilities Part IV: Database Access Vulnerabilities
- Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services
- Unveiling the Hidden Risks of Industrial Automation Programming
- UNWIRED: Understanding the Unforeseen Risks in Evolving Communication Channels
- Update on Exposed MCP Servers: The Threat Widens to the Cloud
- Updated Analysis on Nefilim Ransomware’s Behavior
- Updated Shadowpad Malware Leads to Ransomware Deployment
- US Cities Exposed in Shodan
- Using Containers to Secure Your MCP Infrastructure
- Using Custom Containers in Serverless Environments for Better Security
- Using MITRE ATT&CK to Identify an APT Attack
- Viral AI, Invisible Risks: What OpenClaw Reveals About Agentic Assistants
- Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware
- Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware
- Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
- Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack
- Web Skimming Attack on Blue Bear Affects School Admin Software Users
- What Cybercriminals Look For in Corporate Insiders
- What do Hackers do with Your Stolen Identity?
- What We Know About the NPM Supply Chain Attack
- What You Need to Know About the LockerGoga Ransomware
- When Tokenizers Drift: Hidden Costs and Security Risks in LLM Deployments
- When Trust in AI Becomes an Attack Surface: Analyzing Prompt Injection, Model Theft, and Pipeline Poisoning
- Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
- Working From Home? Here’s What You Need for a Secure Setup
- World Backup Day: What, When, Where and Why You Need to Back up and How to do it
- XCSSET Mac Malware: Infects Xcode Projects, Uses 0Days
- You Can't See Me: Achieving Stealthy Persistence in Azure Machine Learning
- Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise
- Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach
- Your Stolen Data for Sale
- Youtube, Twitter Hunt Down Deepfakes
- ZDI-CAN-25373: Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns
- Zero Breaches Out of 50: TrendAI Vision One™ Endpoint Security Essentials Earns AV-Comparatives Certified Leader Status
- Zero Trust: Enforcing Business Risk Reduction Through Security Risk Reduction
- Zloader Campaigns at a Glance
Customer Stories
- Amazon MGM Studios
- AMN Healthcare
- Bechtle
- Cape Cod Healthcare
- Copenhagen Airports
- Decathlon
- Dell
- DPCDSB
- Fischer Homes
- Foodstuffs South Island
- Gartner Peer Insights
- Gartner Peer Insights - Government
- Gartner Peer Insights Healthcare and Biotech 5989248
- Graybar Canada
- IBM
- Karsan
- Keller ISD
- Kyndryl
- LIC Mutual Fund
- Manufacturing Company
- Max Matthiessen
- MEDCAN
- Northeast Georgia Health System
- Panasonic Holdings Corporation
- PeerSpot
- Peerspot Liauat National Hospital and Medical College
- Plastics Manufacturer
- Real Estate Company
- South Carolina State Library
- South London and Maudsley NHS Foundation Trust
- Step2
- Tech Services Company
- Technoval
- Tondo
- Town of Kill Devil Hills
- Vodafone
- Weatherford ISD
- Xsolis
- Xsolis ESG