Skip to main content

TrendAI™ Ricerca approfondita

spark

Featured Articles

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation
AIOT & critical infrastructure

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation

The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.

16 settembre 2026TrendAI™ Research
Read article
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
IoT & smart devicesASM ASRM
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data

China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.

10 settembre 2026 6 min
Fyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article
An industrial worker inspecting a warehouse
HacktivismRansomware & extortion
Mapping the Criminal Economy Targeting Critical Infrastructure

TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.

2 settembre 2026 7 min
Mayra Rosario Fuentes, Stephen Hilt, Numaan Huq
Read article
Security 101: Virtual Patching
Exploits & Zero-Days
Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

25 agosto 2026 5 min
TrendAI™ Research
Read article

Search for research articles

Cloud securityIdentity & access management (IAM)
Beware of MCP Hardcoded Credentials: A Perfect Target for Threat Actors

Poor secret management in MCP servers can lead to serious consequences, including data breaches and supply chain attacks. This article examines the reality of these unsecure configurations and offers practical recommendations that minimize the chances of exposure.

August 13th, 2025 7 min read Alfredo Oliveira , David Fiser
Read Article
AILLMsAI governance
LLM as a Judge: Evaluating Accuracy in LLM Security Scans

As large language models (LLMs) become more capable and widely adopted, the risk of unintended or adversarial outputs grows, especially within a security-sensitive context. To identify and mitigate such risks, Trend Micro researchers ran LLM security scans that simulate adversarial attacks.

August 4th, 2025 13 min read Matthew Burton, Albert Shala, Anurag Das
Read Article
AICyber crime
The Silent Leap: OpenAI’s New ChatGPT Agent Capabilities and Security Risks

OpenAI recently introduced ChatGPT agent. What are its capabilities and the associated cybersecurity risks? We examined these using Trend Micro’s Digital Assistant Framework to help organizations navigate the changes and risks this new digital assistant may bring.

August 1st, 2025 12 min read Salvatore Gariuolo, Rainer Vosseler
Read Article
AISoftware supply chainZero trust
The Road to Agentic AI: Navigating Architecture, Threats, and Solutions

As agentic AI systems grow increasingly complex, it becomes clear that this class of applications relies on a multi-layered architecture. Trying to chart such architecture reveals several security risks that could plague each layer. This article investigates the possible scenarios and offers actionable insights to secure each layer and combat such threats.

July 28th, 2025 Fernando Tucci, Vincenzo Ciancaglini, Marco Balduzzi, Salvatore Gariuolo…
Read Article
AILLMsCyber crime
Exploiting Trust in Open-Source AI: The Hidden Supply Chain Risk No One Is Watching

As open-source AI models become foundational to digital infrastructure, hidden backdoors and tampered supply chains pose a growing, under-recognized threat that traditional security tools can fail to detect.

July 25th, 2025 Ashish Verma, Deep Patel
Read Article
Exploits & Zero-DaysAIZero trust
MCP Security: Network-Exposed Servers Are Backdoors to Your Private Data

Exposed MCP servers pose a risk for organizations utilizing them. Our research examined the types of concerns that emerge and how to keep systems safe through immediate and extended measures.

July 16th, 2025 Alfredo Oliveira , David Fiser
Read Article
AIDeepfakesPhishing & BEC
Deepfake It ‘til You Make It: A Comprehensive View of the New AI Criminal Toolset

This report takes a comprehensive look at how deepfakes are used to support criminal business processes, what are the toolkits criminals are exploiting to power their deepfake creation, and what the deepfake underground looks like.

July 9th, 2025 David Sancho, Salvatore Gariuolo, Vincenzo Ciancaglini
Read Article
ASM ASRMCyber crime
Proactive Security: The Role of Exposure Management and Detection-Response Capability

Cyberattacks are growing increasingly sophisticated and frequent, which is why security strategies focused solely on detection and response are no longer sufficient. This reality brings renewed attention to the importance of identifying and mitigating cyber risks before incidents occur.

July 2nd, 2025 24 min read Bakuei Matsukawa
Read Article
AILLMs
The Road to Agentic AI: Defining a New Paradigm for Technology and Cybersecurity

Our latest research provides a framework for understanding agentic AI systems, outlines their core characteristics, and examines the security implications surrounding their use.

June 17th, 2025 Salvatore Gariuolo, Vincenzo Ciancaglini
Read Article
AILLMsSoftware supply chain
Slopsquatting: When AI Agents Hallucinate Malicious Packages

Our research examines how AI coding assistants can hallucinate plausible but non-existent package names—therefore enabling slopsquatting attacks—while also providing practical defense strategies that organizations can implement to secure their development pipelines

June 5th, 2025 Sean Park
Read Article