AIExploits & Zero-Days
Zero Breaches Out of 50: TrendAI Vision One™ Endpoint Security Essentials Earns AV-Comparatives Certified Leader Status
15 de septiembre de 2026Jay Yaneza
15 de septiembre de 2026 Read article
TrendAI™
Blog de Seguridad
Blogs destacados
Financial servicesHealthcare & life sciencesTechnology, media, & communications
The Boardroom Debate: How Cyber Risk Hits Your Bottom Line
You don’t need to be an expert to use cyber risk quantification. TrendAI™ automates data collection to deliver real-time financial risk insights and clear next steps for remediation.
11 de septiembre de 2026
Read article
AI
TrendAI™ Brings OpenAI's GPT Cyber Models Into the Race to Shrink Exposure Time to Zero
OpenAI’s GPT cyber models help TrendAI™ close the exposure window, from vulnerability to fix, faster than ever.
3 de septiembre de 2026
Read article
ATF Reports Breach After Qilin Leak Site Appearance: Insights from TrendAI™
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has reportedly appeared on the Qilin ransomware group’s leak site. Explore how Qilin operates and what organizations can learn from its past tactics.
28 de agosto de 2026
Read article
Buscar artículos de investigación
Site search
Filter by:
Malware
Living Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains
In this blog entry, researchers at TrendAI Vision One™ Services – Managed Detection and Response (MDR) walk through how attackers deliver, install, and operate a reconfigured ScreenConnect client, and why it slips past defenses built to catch conventional malware.
August 17th, 2026 15 min read
15 min read
Read Article
Phishing & BEC
How AiTM Phishing Bypassed MFA to Hijack a Microsoft 365 Mailbox in BEC Scheme
One click on a targeted lure handed an attacker live Microsoft 365 session tokens, enough to impersonate a vendor and reroute payments. TrendAI Vision One™ Services – Managed Detection and Response (MDR) tracks the attack to its root cause.
August 14th, 2026 20 min read
Read Article
AIExploits & Zero-Days
La velocidad de la IA está cambiando el panorama de vulnerabilidades. Nuestro compromiso con CISA KEV no lo está.
TrendAI™ está profundizando su enfoque en el Catálogo CISA KEV como una señal comprobada de riesgo activo. Con IA, TrendAI™ combina la investigación de TrendAI™ ZDI, inteligencia de explotación, contexto de exposición y riesgo empresarial para impulsar la priorización continua asistida por IA, ayudando a los equipos de seguridad a tomar mejores decisiones y actuar más rápido.
August 6th, 2026 5 min read
Read Article
Exploits & Zero-Days
How TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow
TrendAI™ Research uncovered an open redirect in Dify's post-login flow that could have handed a freshly authenticated session, token and all, to an attacker, and worked with the vendor to close it across every sign-in path before the details went public.
August 4th, 2026
Read Article
Cyber crime
TrendAI™ Intelligence Aids Law Enforcement Arrest of Tycoon 2FA Operators
The Singapore Police Force (SPF), working closely with Pakistan's National Cyber Crime Investigation Agency (NCCIA) and INTERPOL has arrested two individuals linked to Tycoon2FA, a phishing operation that served criminal customers across four continents.
August 4th, 2026
Read Article
OT & critical infrastructureMFA & authentication
Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know
Disruption reported across at least seven states, from equipment left accessible online. The issue is largely a matter of configuration and access control, and here's what to fix first.
August 3rd, 2026 5 min read
Read Article
AI
Por qué importa la Alianza Abierta de IA Segura: Modelos de Frontera Abiertos, Flexibilidad de Despliegue Abierto
TrendAI se une a Nvidia como socio inaugural en la Open Secure AI Alliance, avanzando en modelos abiertos, arneses e investigación para fortalecer la defensa cibernética.
July 30th, 2026
Read Article
AICyber threats
Dentro del incidente de OpenAI – Hugging Face: La brecha de IA sin atacante humano detrás de ella
Los propios modelos de OpenAI salieron de un entorno de prueba y entraron en los servidores de Hugging Face para resolver una evaluación, sin la intervención de un atacante humano. El incidente demostró que mantener la seguridad de la IA agente ahora depende de cómo se contiene, no solo de cómo se entrena.
July 23rd, 2026 8 min read
Read Article
Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet
47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw.
June 1st, 2026 10 min read
Read Article
AI
The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables
An OAuth supply chain compromise at Vercel exposed how trusted third party apps and platform environment variables can bypass traditional defenses and amplify blast radius. This article examines the attack chain, underlying design tradeoffs, and what it reveals about modern PaaS and software supply chain risk.
April 20th, 2026 29 min read
Read Article