Sovereign AI places responsibility for every layer of the security stack in the operator's hands, and this article examines the threats that accompany that shift alongside the practical controls that keep nationally owned AI systems trustworthy.
TrendAI™ Research's investigation of ICS protocols near U.S. data centers uncovered thousands of vulnerable devices controlling critical cooling, power, and environmental infrastructure. These systems—designed for operational efficiency, not security—were accessible from the public internet.
This final installment of our trilogy on Pwning Agentic AI covers defenses against the return-to-tool (RTT) attacks—read-only Postgres bypass, support-ticket ransomware, and KYC passport exfiltration—demonstrated in Part II. Here we take a look at what works and what doesn’t against this new class of attack.
The supply and demand for insider threat actors have evolved from isolated opportunism into a structured, thriving criminal market, complete with brokers, recruiters, referral bonuses, guarantor services, and revenue-sharing arrangements. This research examines that market across different industries.
A new report reveals Coinhive's reach after it ranked the coin miner as the 6th most common malware in the world.
The number of mobile phone users around the world is projected to exceed the five billion mark by 2019. Since cybercriminals usually cast wide nets to reach more potential victims, mobile users should protect their devices early on to defend against threats.
The Middle Eastern and North African (MENA) underground is characterized by its ironic mix of ideology and felony. We take a look at its inner workings, available wares, and the unique sense of brotherhood shared by its players.
The leading social media platforms have billions of users, and the number keeps getting bigger every year. Learn how to keep your social media accounts secure.
A spate of new attacks targeting the Android operating system have been discovered using a banking trojan named Red Alert 2.0.
In a data-driven world where information is often a company’s most valuable asset, protecting data is more important than it’s ever been.
Legitimate tools used by IT/system administrators have become valuable cybercriminal targets because of the privilege they provide for greater network access. Here are some best practices for mitigating the abuse of sysadmin tools.
ATM malware has become a mainstay in many cybercriminals’ arsenal due to its capability to steal money. In our joint efforts with Europol’s EC3, we explain in detail how criminals continue to leverage different ATM malware families and attack types.
Can we fix the lag between patch releases and actual implementation? Current events reveal that patching should be made a definite priority. We provide a guide on how to manage patching for enterprises and large organizations.
KOVTER is one example of a constantly evolving malware. Initially starting out as a police ransomware, it eventually evolved into a much more effective and evasive fileless malware. Here is a closer look at KOVTER, and how organizations can lessen its impact.
August 11th, 2026 
43 min