In-depth cybersecurity research and reports from the TrendAI teamhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/frhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/from-state-ai-ecosystems-to-global-apt-cyberthreatshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/from-state-ai-ecosystems-to-global-apt-cyberthreatsTrendAI™ Research examines the unique dynamics and factors that influence the adoption of AI in state-aligned APT activity. The report looks into four countries (China, Russia, North Korea, and Iran) to understand why their state-aligned actors adopt AI in the ways that they do.Tue, 06 Oct 2026 13:00:00 GMTAsako KoizumiAICyber crimehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/scarecrow-making-the-attackers-ai-say-nohttps://www.trendaisecurity.com/fr/resources-insights/deep-research/scarecrow-making-the-attackers-ai-say-noWe developed Scarecrow, a tool that hides refusal instructions in documents so AI agents ingesting them are prompted to stop processing. Our findings show that this same technique can help defenders disrupt AI-driven access to sensitive documents.Wed, 30 Sep 2026 19:48:00 GMTTrendAI™ ResearchAIhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/prescription-for-risk-the-cybersecurity-hazards-of-genai-in-healthcarehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/prescription-for-risk-the-cybersecurity-hazards-of-genai-in-healthcareGenerative AI now writes clinical notes, drafts patient replies, and decides claims, often faster than healthcare’s oversight can keep pace. TrendAI™ Research maps the resulting “custody gap” and the risk it creates, from the exam room to the back office, where AI-generated artifacts can enter patient records.Wed, 30 Sep 2026 11:35:00 GMTNumaan HuqAIHealthcare & life scienceshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/the-enterprise-guide-to-governing-autonomous-ai-agentshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/the-enterprise-guide-to-governing-autonomous-ai-agentsIn this report, we present the security and governance issues enterprises should consider when adopting and using AI agents. We lay out the risk structure unique to AI agents and present a security framework and a method for technical and organizational controls to support AI adoption. Wed, 30 Sep 2026 00:00:00 GMTSean ParkAIhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/aixploit-from-lucky-phrasing-to-a-map-of-the-attack-surfacehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/aixploit-from-lucky-phrasing-to-a-map-of-the-attack-surfaceOur TrendAI™ Research team developed AIxploit, a framework that systematically maps an agent’s AI-native attack surface through attack testing. Thu, 24 Sep 2026 15:40:00 GMTSean ParkAIhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/1h-2026-state-of-ai-securityhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/1h-2026-state-of-ai-securityHow AI is accelerating traditional security failures, and why familiar threats are now harder to detect and contain.Wed, 23 Sep 2026 06:30:00 GMTTrendAI™ ResearchThreat reportsAIhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/openclaw-security-analysis-the-hidden-risks-of-agentic-ai-at-scalehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/openclaw-security-analysis-the-hidden-risks-of-agentic-ai-at-scaleWe examine how OpenClaw’s exposed deployments, plaintext credential storage, prompt injection risks, unguarded MCP integrations, and malicious third-party skills amplify the security risks of agentic AI at enterprise scale.Mon, 21 Sep 2026 01:00:00 GMTDavid FiserAIhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/critical-infrastructure-under-threat-how-frontier-ai-changes-the-risk-equationhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/critical-infrastructure-under-threat-how-frontier-ai-changes-the-risk-equationThe critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.Wed, 16 Sep 2026 08:16:00 GMTTrendAI™ ResearchAIOT & critical infrastructurehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/rethinking-the-external-attack-surface-managing-the-growing-risk-of-open-cyber-physical-datahttps://www.trendaisecurity.com/fr/resources-insights/deep-research/rethinking-the-external-attack-surface-managing-the-growing-risk-of-open-cyber-physical-dataChina-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.Thu, 10 Sep 2026 00:15:00 GMTFyodor YarochkinIoT & smart devicesASM ASRMhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/mapping-the-criminal-economy-targeting-critical-infrastructurehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/mapping-the-criminal-economy-targeting-critical-infrastructureTrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.Wed, 02 Sep 2026 13:00:00 GMTMayra Rosario FuentesHacktivismRansomware & extortionhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/security-101-virtual-patchinghttps://www.trendaisecurity.com/fr/resources-insights/deep-research/security-101-virtual-patchingWhat happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.Tue, 25 Aug 2026 09:39:05 GMTTrendAI™ ResearchExploits & Zero-Dayshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/securing-sovereign-ai-practical-controls-across-physical-software-and-model-supply-chainshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/securing-sovereign-ai-practical-controls-across-physical-software-and-model-supply-chainsSovereign AI places responsibility for every layer of the security stack in the operator's hands, and this article examines the threats that accompany that shift alongside the practical controls that keep nationally owned AI systems trustworthy. Tue, 11 Aug 2026 05:31:00 GMTNumaan HuqAI governancehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/an-invisible-attack-surface-thousands-of-industrial-control-systems-exposed-near-data-centershttps://www.trendaisecurity.com/fr/resources-insights/deep-research/an-invisible-attack-surface-thousands-of-industrial-control-systems-exposed-near-data-centersTrendAI™ Research's investigation of ICS protocols near U.S. data centers uncovered thousands of vulnerable devices controlling critical cooling, power, and environmental infrastructure. These systems—designed for operational efficiency, not security—were accessible from the public internet. Sat, 08 Aug 2026 00:30:00 GMTStephen HiltCloud securityhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/pwning-agentic-ai-part-iii-securing-your-ai-agenthttps://www.trendaisecurity.com/fr/resources-insights/deep-research/pwning-agentic-ai-part-iii-securing-your-ai-agentThis final installment of our trilogy on Pwning Agentic AI covers defenses against the return-to-tool (RTT) attacks—read-only Postgres bypass, support-ticket ransomware, and KYC passport exfiltration—demonstrated in Part II. Here we take a look at what works and what doesn’t against this new class of attack.Thu, 06 Aug 2026 09:00:00 GMTSean ParkAIhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/what-cybercriminals-look-for-in-corporate-insidershttps://www.trendaisecurity.com/fr/resources-insights/deep-research/what-cybercriminals-look-for-in-corporate-insidersThe supply and demand for insider threat actors have evolved from isolated opportunism into a structured, thriving criminal market, complete with brokers, recruiters, referral bonuses, guarantor services, and revenue-sharing arrangements. This research examines that market across different industries.Tue, 04 Aug 2026 15:52:00 GMTMayra Rosario FuentesCyber crimehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/2026-h1-apt-report-how-apts-are-weaponizing-trust-in-the-age-of-aihttps://www.trendaisecurity.com/fr/resources-insights/deep-research/2026-h1-apt-report-how-apts-are-weaponizing-trust-in-the-age-of-aiLes acteurs malveillants sponsorisés par des États intègrent l'IA à chaque étape de leur chaîne d'attaque, tout en dissimulant leur infrastructure au cœur de services considérés comme étant de confiance pour les entreprises ciblées. Ce rapport décrypte les enjeux géopolitiques à l'origine de ces attaques et les éléments auxquels les défenseurs doivent donner la priorité.Wed, 29 Jul 2026 14:43:00 GMTTrendAI™ ResearchAIAPTshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/the-vulnerability-window-is-closing-quickly-what-cisa-and-five-eyes-now-say-about-public-sector-securityhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/the-vulnerability-window-is-closing-quickly-what-cisa-and-five-eyes-now-say-about-public-sector-securityCISA's BOD 26-04 and a new Five Eyes statement highlight the same urgent gaps in vulnerability management. Find out what these developments mean for your security program. Thu, 23 Jul 2026 07:52:00 GMTJon ClayAICyber threatshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/modern-bank-heists-2026-the-machine-speed-war-for-financial-controlhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/modern-bank-heists-2026-the-machine-speed-war-for-financial-controlHow agentic AI, nation-state actors, and cybercrime-as-a-service are outpacing financial sector defenses, and how defenders can respond at machine speed Wed, 22 Jul 2026 12:45:39 GMTTom KellermannAICyber crimehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/governing-the-republic-of-ai-agentshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/governing-the-republic-of-ai-agentsAI agents have evolved from tools to autonomous participants in your organization, but governance has not kept pace. TrendAI™ proposes a six-pillar framework built to close that gap. Tue, 21 Jul 2026 06:33:00 GMTTrendAI™ ResearchAIhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/building-sovereign-ai-technical-considerations-for-foundation-and-architecturehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/building-sovereign-ai-technical-considerations-for-foundation-and-architectureGovernments around the world are committing billions to domestic AI development, but the race to create sovereign AI strategies has outpaced a clear understanding of what sovereignty actually requires. This research offers government and enterprise leaders a practical, layer-by-layer framework for determining how sovereign they need to be, and where it matters most.Mon, 20 Jul 2026 10:06:00 GMTNumaan HuqAI governancehttps://www.trendaisecurity.com/fr/resources-insights/deep-research/agentic-ais-shadow-pipeline-mapping-the-attack-surface-behind-trusted-workflowshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/agentic-ais-shadow-pipeline-mapping-the-attack-surface-behind-trusted-workflowsAs enterprises connect AI agents to cloud infrastructure and production workflows, the cloud-to-agent pipeline is becoming a primary attack surface. This article maps the risks for tech, media, and communications organizations and outlines detection and security best practices.Fri, 17 Jul 2026 08:12:00 GMTTrendAI™ ResearchAICloudhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/pwning-agentic-ai-part-ii-when-trusted-agents-do-untrusted-thingshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/pwning-agentic-ai-part-ii-when-trusted-agents-do-untrusted-thingsReturn-to-tool isn't theoretical. TrendAI™ Research presents three cases showing exactly how a compromised agent—wielding only its own approved tools—becomes the most dangerous component in the stack.Thu, 16 Jul 2026 01:28:00 GMTSean ParkAIExploits & Zero-Dayshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/trendai-2026-cyber-risk-reporthttps://www.trendaisecurity.com/fr/resources-insights/deep-research/trendai-2026-cyber-risk-reportThe 2026 Cyber Risk Report builds on last year's findings with expanded telemetry, providing organizations with the directional insights and data that can be used to help prioritize the exposures that matter most before attackers reach them.Wed, 08 Jul 2026 02:00:00 GMTTrendAI™ ResearchCyber riskThreat reportshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/stars-dont-save-you-popularity-is-not-security-in-the-mcp-ecosystemhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/stars-dont-save-you-popularity-is-not-security-in-the-mcp-ecosystemBuilding on our previous research, we correlated the security issues identified in public MCP servers with metadata crawled from popular directories. We then analyzed whether indicators such as popularity, activity, and vetting serve as reliable metrics to infer the risk of adopting an MCP server.Wed, 24 Jun 2026 03:02:00 GMTVincenzo CiancagliniAIExploits & Zero-Dayshttps://www.trendaisecurity.com/fr/resources-insights/deep-research/the-attackers-are-already-inside-nerc-cip-015-is-how-the-grid-fights-backhttps://www.trendaisecurity.com/fr/resources-insights/deep-research/the-attackers-are-already-inside-nerc-cip-015-is-how-the-grid-fights-backNERC CIP-015 is the first NERC CIP standard to mandate internal network security monitoring for Bulk Electric System environments. Here is what it requires, why OT environments make compliance hard, and how TrendAI™ addresses each obligation.Mon, 22 Jun 2026 05:41:00 GMTAmruta NamjoshiCyber threatsOT & critical infrastructure