# Trend AI Security — Full Content Index > Complete page listing for trendaisecurity.com with descriptions. Site: https://www.trendaisecurity.com Generated: 2026-10-18 --- ## Compare TrendAI™ > See how TrendAI™ stops threats from digital adversaries faster than the competition and helps you take control of your cyber risks with a single platform URL: https://www.trendaisecurity.com/en-us/compare Updated: 2026-09-24 Category: compare --- ## #NoFilter: Exposing the Tactics of Instagram Account Hackers > What tactics do Instagram account hackers use? What do these cybercriminals do with stolen accounts? How can users protect their accounts? We look into Instagram account hacking incidents from a security researcher’s perspective and share recommendations for users of Instagram and other social media platforms. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/no-filter--exposing-the-tactics-of-instagram-account-hackers Updated: 2026-08-12 Category: blog --- ## 2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M > Long time users of Linkedin users may very well need to change their passwords once more as a cybercriminal puts the email addresses and passwords of 117 million users up for sale. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/2012-linkedin-breach-117-million-emails-and-passwords-stolen-not-6-5m Updated: 2026-08-05 Category: research --- ## 2020 Report: ICS Endpoints as Starting Points for Threats > ICS endpoint security has become more important as the interconnection between IT and OT continues to grow. Our research shares the status of global industrial systems in terms of security against both known and new threats that hound ICS endpoints. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/2020-report-ics-endpoints-as-starting-points-for-threats Updated: 2026-10-07 Category: research --- ## 3 Indonesian Hackers Arrested for Global Magecart Attacks, Other Members Still at Large > The Interpol, together with the Indonesian National Police, announced the arrest of three Indonesian men suspected of being behind Magecart attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/3-indonesian-hackers-arrested-for-global-magecart-attacks-other-members-still-at-large Updated: 2026-10-09 Category: research --- ## 500 Million Yahoo Users Affected by Data Breach – Password Change Recommended > Yahoo users are prompted to change passwords as a massive breach compromises 500 million accounts. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/500-million-yahoo-users-affected-by-data-breach-password-change-recommended Updated: 2026-08-14 Category: research --- ## 5G and Aviation: A Look Into Security and Technology Upgrades Working in Tandem > Following 5G implementation in US airports, we discuss the technical features, security concerns, and potential risks this implementation carries for the industry and its customers, as well as provide some recommendations. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/5g-and-aviation-looking-at-security-and-technology-upgrades-working-in-tandem Updated: 2026-10-07 Category: research --- ## A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services > This article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-closer-exploration-of-residential-proxies-and-captcha-breaking-services Updated: 2026-08-05 Category: research --- ## A Data-Driven View of Cyber Risk Structure: How Attack Pressure and Exposure Shape Damage > TrendAI™ Research analyzed 2,014 enterprises throughout 2025 and found that cyber damage is shaped by the interaction of attack pressure and exposure, with the highest-risk organizations experiencing up to 3.3 times as much damage as the lowest. The study introduces a Cyber Risk Positioning Map that can help organizations identify whether to prioritize reducing exposure, strengthening response capability, or both. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-data-driven-view-of-cyber-risk-structure-how-attack-pressure-and-exposure-shape-damage Updated: 2026-09-16 Category: research --- ## A Deep Dive Into Kubernetes Threat Modeling > This report explores the aspects and considerations required to properly perform threat modeling within a Kubernetes environment, a piece of technology that many organizations worldwide rely on and a leading container orchestration platform. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-deep-dive-into-kubernetes-threat-modeling Updated: 2026-08-05 Category: research --- ## A Deep Dive into the Packet Reflection Vulnerability Allowing Attackers to Plague Private 5G Networks > The lack of encryption and authentication mechanisms in the GTP-U protocol between base stations and 5GC UPFs could allow cybercriminals to use a packet reflection vulnerability to carry out attacks on 5G devices in internal networks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/plague-private-5g-networks Updated: 2026-08-24 Category: research --- ## A Deepfake Scammed a Bank out of $25M — Now What? > Hong Kong firm claims $25 million loss to fraudsters using deepfake technology. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/deepfake-video-calls Updated: 2026-08-12 Category: blog --- ## A Growing Goldmine: Your LinkedIn Data Abused for Cybercrime > We looked into professional and business networking platform LinkedIn and how cybercriminals abuse the platform to victimize users and companies, and how they monetize posted personal, career, and organizational information. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-growing-goldmine-your-linkedin-data-abused-for-cybercrime Updated: 2026-08-05 Category: research --- ## A Hidden Vulnerability in Healthcare: Exposed DICOM Servers and the Risk to Patient Data > Analysis from TrendAI™ Research found that thousands of DICOM medical imaging servers worldwide are exposed online without basic security measures, leaving sensitive patient data and healthcare operations vulnerable to cyberattacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-hidden-vulnerability-in-healthcare-exposed-dicom-servers-and-the-risk-to-patient-data Updated: 2026-08-11 Category: research --- ## A Look at Linux: Threats, Risks, and Recommendations > This article aims to discuss the Linux threat landscape and examine how Linux has become an attractive target for attackers, as well as how it can be prone to a variety of threats and risks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-look-at-linux-threats-risks-and-recommendations Updated: 2026-08-09 Category: research --- ## A Ride on Taiwan’s Self-Driving Bus > We went for a ride on the self-driving bus now being tested in Taiwan. Here are our insights. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-ride-on-taiwan-s-self-driving-bus Updated: 2026-08-21 Category: research --- ## A Roadmap to Secure Connected Cars: Charting the WP.29's UN Regulation No. 155 > As connected cars become more commonplace, the UN Regulation No. 155 sets guidelines to ensure cybersecurity in vehicles. This research assesses the risks of its highlighted attack vectors and looks beyond its scope to identify top priorities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-roadmap-to-secure-connected-cars Updated: 2026-10-08 Category: research --- ## A Security Guide to IoT-Cloud Convergence > The integration of the IoT and cloud computing poses new possibilities for industries. It is important not to overlook their respective security risks and the measures to take against them when the two technologies converge. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/a-security-guide-to-iot-cloud-convergence Updated: 2026-10-02 Category: research --- ## A Shift in the ATM Malware Landscape: From Physical to Network-based Attacks > ATM malware has become a mainstay in many cybercriminals’ arsenal due to its capability to steal money. In our joint efforts with Europol’s EC3, we explain in detail how criminals continue to leverage different ATM malware families and attack types. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/shift-in-atm-malware-landscape-to-network-based-attacks Updated: 2026-08-05 Category: research --- ## AI Assistants in the Future: Security Concerns and Risk Management > The article explores the evolving landscape of AI digital assistants, highlighting their transformative potential, associated security risks, and the importance of robust design and collaboration to ensure a secure and user-centric future. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/looking-into-the-future-risks-and-security-considerations-to-ai-digital-assistants Updated: 2026-08-05 Category: research --- ## AI Fearlessly > Take control in the AI era. Eliminate risk, gain actionable insights, and make smarter security decisions. URL: https://www.trendaisecurity.com/en-us/campaigns/ai-fearlessly Updated: 2026-06-12 Category: campaign --- ## AI Frontier Labs Can Slow Down. Defenders Can’t Afford To. > While frontier labs debate slowing AI innovation, defenders must accelerate. Explore why agentic AI threats demand faster security responses and governance strategies. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/ai-defenders-cannot-slow-down Updated: 2026-09-25 Category: blog --- ## AI Security > Strengthen your company's AI security and security for AI with TrendAI Vision One™. URL: https://www.trendaisecurity.com/en-us/platform/proactive-ai-security Updated: 2026-07-31 Category: platform --- ## AI Security Brief > Hosts Johnny Hand and Dustin Childs break down AI-driven attacks with security leaders, researchers, and international law enforcement. New episodes every two weeks. URL: https://www.trendaisecurity.com/en-us/resources-insights/ai-security-brief Updated: 2026-10-14 Category: resourceHub --- ## AI Security Starts Here: The Essentials for Every Organization > AI’s rapid growth brings new risks as well as opportunities. Strong security foundations are essential to ensure innovation remains safe, compliant, and resilient. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ai-security-starts-here-the-essentials-for-every-organization Updated: 2026-08-05 Category: research --- ## AI Security: NVIDIA BlueField Now with Vision One™ > Learn how Trend Vision One™ and NVIDIA BlueField now transforms your AI security. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/ai-security-nvidia-bluefield Updated: 2026-08-23 Category: blog --- ## AI Skills as an Emerging Attack Surface in Critical Sectors: Enhanced Capabilities, New Risks > AI skills bridge the gap between AI capabilities and real-world operations, but in doing so, they also introduce new risks and avenues for attack. We explore the challenges of AI skill adoption and provide a practical framework for secure deployment. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ai-skills-as-an-emerging-attack-surface-in-critical-sectors-enhanced-capabilities-new-risks Updated: 2026-08-15 Category: research --- ## AI and the Evolving Threat Landscape: What Public Sector CISOs Need to Know Now > Public sector CISOs need to grapple with challenges brought about by AI threats: up to 3,600 AI CVEs in 2026, autonomous ransomware, and critical infrastructure risk. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/ai-evolving-threat-landscape-what-public-sector-cisos-need-to-know-now Updated: 2026-10-12 Category: blog --- ## AI in the Crosshairs: Understanding and Detecting Attacks on AWS AI Services with Trend Vision One™ > This article offers a fresh perspective on AI security, emphasizing that while core AI models are often the focus, the surrounding infrastructure and cloud services are equally critical to securing AI applications, particularly with the rise of AI-as-a-Service. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/detecting-attacks-on-aws-ai-services-with-trend-vision-one Updated: 2026-08-05 Category: research --- ## AI vs AI: DeepFakes and eKYC > This analysis investigates the security risks of eKYC systems in relation to deepfake attacks, highlighting the diverse strategies employed by cybercriminals in bypassing eKYC security measures. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ai-vs-ai-deepfakes-and-ekyc Updated: 2026-09-11 Category: research --- ## AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows > In this blog entry, Trend™ Research provides a comprehensive breakdown of GhostPenguin, a previously undocumented Linux backdoor with low detection rates that was discovered through AI-powered threat hunting and in-depth malware analysis. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/ghostpenguin Updated: 2026-08-14 Category: blog --- ## AIxploit: From Lucky Phrasing to a Map of the Attack Surface > Our TrendAI™ Research team developed AIxploit, a framework that systematically maps an agent’s AI-native attack surface through attack testing. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/aixploit-from-lucky-phrasing-to-a-map-of-the-attack-surface Updated: 2026-09-25 Category: research --- ## AMN Healthcare URL: https://www.trendaisecurity.com/en-us/customer-stories/amn-healthcare Updated: 2026-07-10 Category: customerStory --- ## API Security Exposed: The Role of API Vulnerabilities in Real-World Data Breaches > Our research highlights the problems faced by organizations with regard to API vulnerabilities and offers actionable solutions and practical steps to secure API systems. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exploring-the-depths-of-api-security Updated: 2026-10-12 Category: research --- ## APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs > We have continued tracking APT-C-36, also known as Blind Eagle, since our research on this threat actor in 2019. We share new findings of APT-C-36’s ongoing spam campaign targeting South American entities. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/apt-c-36-updates-its-long-term-spam-campaign-against-south-ameri Updated: 2026-08-26 Category: blog --- ## ATF Reports Breach After Qilin Leak Site Appearance: Insights from TrendAI™ > The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has reportedly appeared on the Qilin ransomware group’s leak site. Explore how Qilin operates and what organizations can learn from its past tactics. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/atf-reports-breach-after-qilin-leak-site-appearance-insights-from-trendaitm Updated: 2026-09-16 Category: blog --- ## AWS > Secure it all – your AWS cloud, workloads, data, and AI – with TrendAI Vision One™. Monitor 80+ AWS services with 600+ rules. Better together with AWS. URL: https://www.trendaisecurity.com/en-us/partners/aws Updated: 2026-10-16 Category: partner --- ## AWS re: Invent > Join TrendAI™ at AWS re:Invent 2026. Visit booth #445, explore live demos, meet our experts, and discover what’s next for security on AWS. URL: https://www.trendaisecurity.com/en-us/events/aws-reinvent Updated: 2026-10-14 --- ## About > Discover the company shaping the future of cybersecurity so you can outpace AI-enabled threats. URL: https://www.trendaisecurity.com/en-us/about Updated: 2026-07-31 Category: about --- ## Abusing Argo CD, Helm, and Artifact Hub: An Analysis of Supply Chain Attacks in Cloud-Native Applications > We provide an overview of cloud-native tools and examine how cybercriminals can exploit their vulnerabilities to launch supply chain attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/abusing-argo-cd-helm-and-artifact-hub-an-analysis-of-supply-chain-attacks-in-cloud-native-applications Updated: 2026-10-05 Category: research --- ## Across the Span of the Spanish Cybercriminal Underground: Current Activities and Trends > What does the present state of the Spanish-speaking cybercriminal underground look like? What are the most common scams and other illicit offerings peddled by cybercriminals? Unearth the secrets of the Spanish dark market in our research. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/across-the-span-of-the-spanish-cybercriminal-underground-current-activities-and-trends Updated: 2026-08-21 Category: research --- ## Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C > Continuous investigation on the Water Saci campaign reveals innovative email-based C&C system, multi-vector persistence, and real-time command capabilities that allow attackers to orchestrate coordinated botnet operations, gather detailed campaign intelligence, and dynamically control malware activity across multiple infected machines. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/active-water-saci-campaign-whatsapp-update Updated: 2026-10-07 Category: blog --- ## Addressing CAPTCHA-Evading Phishing Threats With Behavior-Based AI Protection > We discuss threats posed by phishing attacks that use CAPTCHA evasion techniques and provide a security framework to tackle such threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/addressing-captcha-evading-phishing-threats-with-behavior-based-ai-protection Updated: 2026-09-28 Category: research --- ## Addressing Cloud-Related Threats to the IoT > This article explores the major cloud-related security threats to the IoT and discusses recommendations to help address them Some pointers on how you can improve the security of your IoT-cloud infrastructure also follows. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/addressing-cloud-related-threats-to-the-iot Updated: 2026-10-05 Category: research --- ## Addressing Threats Like Ryuk via Trend Micro XDR > Our infographic shows how Trend Micro XDR is designed to combat threats like Ryuk using machine learning and analytics to correlate various events across multiple layers. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/addressing-threats-like-ryuk-via-trend-micro-xdr Updated: 2026-10-02 Category: research --- ## Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques > Trend™ Research identified a sophisticated Agenda ransomware attack that deployed a Linux variant on Windows systems. This cross-platform execution can make detection challenging for enterprises. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/agenda-ransomware-deploys-linux-variant-on-windows-systems Updated: 2026-08-27 Category: blog --- ## Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script > This blog entry discusses the Agenda ransomware group's use of its latest Rust variant to propagate to VMWare vCenter and ESXi servers. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/agenda-ransomware-propagates-to-vcenters-and-esxi-via-custom-pow Updated: 2026-09-16 Category: blog --- ## Agentic AI’s Shadow Pipeline: Mapping the Attack Surface Behind Trusted Workflows > As enterprises connect AI agents to cloud infrastructure and production workflows, the cloud-to-agent pipeline is becoming a primary attack surface. This article maps the risks for tech, media, and communications organizations and outlines detection and security best practices. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/agentic-ais-shadow-pipeline-mapping-the-attack-surface-behind-trusted-workflows Updated: 2026-08-21 Category: research --- ## Agentic Edge AI: Autonomous Intelligence on the Edge > Agentic edge AI offers enhanced advantages, but with this comes cybersecurity challenges. Learn more about agentic edge AI and its architecture, and equip your organization by examining related threats and mitigation strategies for these risks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/agentic-edge-ai-autonomous-intelligence-on-the-edge Updated: 2026-08-05 Category: research --- ## Agentic Edge AI: Development Tools and Workflows > Trend™ Research inspected agentic edge AI systems and the development tools and workflows they leverage and uncovered an intricate labyrinth that demands robust protection from cyberthreats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/agentic-edge-ai-development-tools-and-workflows Updated: 2026-07-24 Category: research --- ## Amazon MGM Studios > For us, growth in the future is absolute. We're continuously producing more data. [TrendAI™ Vision One™] provides a scalable solution that guarantees the safety of our content. URL: https://www.trendaisecurity.com/en-us/customer-stories/amazon-mgm-studios Updated: 2026-09-10 Category: customerStory --- ## An Analysis of Azure Managed Identities Within Serverless Environments > We examine Azure’s Managed Identities service and its security capability in a threat model as developers’ go-to feature for managing secrets and credentials. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/an-analysis-of-azure-managed-identities-within-serverless-environments Updated: 2026-10-01 Category: research --- ## An Invisible Attack Surface: Thousands of Industrial Control Systems Exposed Near Data Centers > TrendAI™ Research's investigation of ICS protocols near U.S. data centers uncovered thousands of vulnerable devices controlling critical cooling, power, and environmental infrastructure. These systems—designed for operational efficiency, not security—were accessible from the public internet. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/an-invisible-attack-surface-thousands-of-industrial-control-systems-exposed-near-data-centers Updated: 2026-08-08 Category: research --- ## An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps > Trend™ Research analyzed a campaign distributing Atomic macOS Stealer (AMOS), a malware family targeting macOS users. Attackers disguise the malware as “cracked” versions of legitimate apps, luring users into installation. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/an-mdr-analysis-of-the-amos-stealer-campaign Updated: 2026-08-18 Category: blog --- ## Analysis: Abuse of .NET features for compiling malicious programs > While the .NET framework is originally intended to help software engineers, cybercriminals have found a way to abuse its features to compile and execute malware on the fly. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/analysis-abuse-of-net-features-for-compiling-malicious-programs Updated: 2026-10-12 Category: research --- ## Analysis: Suspicious “Very Hidden” Formula on Excel 4.0 Macro Sheet > Cybercriminals exploit a feature in Excel that allows users to hide sheets by hiding obfuscated suspicious formulas in a “Very Hidden” sheet. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/analysis-suspicious-very-hidden-formula-on-excel-4-0-macro-sheet Updated: 2026-10-16 Category: research --- ## Analyzing The ForcedEntry Zero-Click iPhone Exploit Used By Pegasus > Citizen Lab has released a report on a new iPhone threat dubbed ForcedEntry. This zero-click exploit seems to be able to circumvent Apple's BlastDoor security, and allow attackers access to a device without user interaction. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/analyzing-pegasus-spywares-zero-click-iphone-exploit-forcedentry Updated: 2026-08-25 Category: blog --- ## Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response > Threat actors exploited Cloudflare's free-tier infrastructure and legitimate Python environments to deploy the AsyncRAT remote access trojan, demonstrating advanced evasion techniques that abuse trusted cloud services for malicious operations. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/analyzing-a-a-multi-stage-asyncrat-campaign-via-mdr Updated: 2026-08-13 Category: blog --- ## Analyzing the Data Distribution Service (DDS) Protocol for Critical Industries > The Data Distribution Service (DDS) standard drives thousands of systems every day as a middleware component for machine-to-machine communication with real-time requirements. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/analyzing-the-data-distribution-service-dds-protocol-for-critical-industries Updated: 2026-10-05 Category: research --- ## Analyzing the Risks of Using Environment Variables for Serverless Management > We examined the potential risks associated with using the serverless environment service for secrets management. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/analyzing-the-risks-of-using-environmental-variables-for-serverless-management Updated: 2026-10-02 Category: research --- ## Analyzing the Risks of Using Environmental Variables for Managing Serverless Environments > We examined the potential risks associated with using the serverless environment service for secrets management. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/analyzing-the-risks-of-using-environmental-variables-for-serverless-management-staging Updated: 2026-10-05 Category: research --- ## Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper > Anubis is an emerging ransomware-as-a-service (RaaS) group that adds a destructive edge to the typical double-extortion model with its file-wiping feature. We explore its origins and examine the tactics behind its dual-threat approach. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/anubis-a-closer-look-at-an-emerging-ransomware Updated: 2026-08-27 Category: blog --- ## Apache APISIX In-the-wild Exploitations: An API Gateway Security Study > This article focuses on the Apache APISIX API gateway and its security implications. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/apache-apisix-in-the-wild-exploitations-an-api-gateway-security-study Updated: 2026-08-28 Category: research --- ## Application Security 101 > Security issues often arise as a result of applications being rushed for deployment without adequate checks and protections. What are the top security risks to applications and what can organizations do to secure their DevOps pipeline? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/application-security-101 Updated: 2026-10-02 Category: research --- ## Assess Your AI Security Maturity Through Visibility, Observability, Ownership, and Governance > Three questions can help reveal your AI security maturity. Hear expert perspectives and explore the pathway to governance in a series of short video conversations. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/assess-ai-security-maturity-visibility-observability-ownership-governance Updated: 2026-10-15 Category: blog --- ## Attacks Against Industrial Machines via Vulnerable Radio Remote Controllers: Security Analysis and Recommendations > Radio frequency (RF) technology is being used in operations to control various industrial machines. However, the lack of implemented security in RF communication protocols could lead to production sabotage, system control, and unauthorized access. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/attacks-against-industrial-machines-via-vulnerable-radio-remote-controllers-security-analysis-and-recommendations Updated: 2026-08-05 Category: research --- ## Australian Health Insurance-Themed Spam Spreads Ursnif > A spam campaign that spreads the Ursnif spyware has attachments named after an Australian insurance provider. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/australian-health-insurance-themed-spam-spreads-ursnif Updated: 2026-10-07 Category: research --- ## AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT > BLADABINDI’s customizability and seeming availability in the underground make it a prevalent threat. Last week, we came across a worm (Worm.Win32.BLADABINDI.AA) that propagates through removable drives and installs a fileless version of BLADABINDI. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/autoit-compiled-worm-affecting-removable-media-delivers-fileless-version-of-bladabindi-njrat-backdoor Updated: 2026-09-30 Category: blog --- ## Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads > A supply chain attack hit Axios when attackers used stolen npm credentials to publish malicious versions containing a phantom dependency. This triggered a cross-platform RAT during installation and replaced its files with clean decoys, making detection challenging. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/axios-npm-package-compromised Updated: 2026-09-11 Category: blog --- ## Azure Control Plane Threat Detection With TrendAI Vision One™ > Malicious access to the Azure control plane can lead to a cascade of assaults that can be disastrous and difficult to detect. TrendAI Vision One™ helps protect the Azure control plane through early threat identification and rapid response. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/azure-control-plane-threat-detection-with-trendai-vision-one Updated: 2026-08-05 Category: research --- ## BEC Scam Costing Almost US$11 Million Leads to FBI Arrest of Nigerian Businessman > The CEO of the Invictus Group of Companies, Obinwanne Okeke, has reportedly been arrested by the FBI after he was accused of conspiracy to commit computer and wire fraud. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/bec-scam-costing-almost-us-11-million-leads-to-fbi-arrest-of-nigerian-businessman Updated: 2026-08-05 Category: research --- ## BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets > A controller linked to BPF backdoor can open a reverse shell, enabling deeper infiltration into compromised networks. Recent attacks have been observed targeting the telecommunications, finance, and retail sectors across South Korea, Hong Kong, Myanmar, Malaysia, and Egypt. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/bpfdoor-hidden-controller Updated: 2026-10-08 Category: blog --- ## Back to Business: Lumma Stealer Returns with Stealthier Methods > Lumma Stealer has re-emerged shortly after its takedown. This time, the cybergroup behind this malware appears to be intent on employing more covert tactics while steadily expanding its reach. This article shares the latest methods used to propagate this threat. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/lumma-stealer-returns Updated: 2026-08-12 Category: blog --- ## Back to the Hype: An Update on How Cybercriminals Are Using GenAI > Generative AI continues to be misused and abused by malicious individuals. In this article, we dive into new criminal LLMs, criminal services with ChatGPT-like capabilities, and deepfakes being offered on criminal sites. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/back-to-the-hype-an-update-on-how-cybercriminals-are-using-genai Updated: 2026-08-05 Category: research --- ## Bashlite Updated with Mining and Backdoor Commands > We uncovered an updated Bashlite malware designed to add infected internet-of-things devices to a distributed-denial-of-service (DDoS) botnet. Based on the Metasploit module it exploits, the malware targets devices with the WeMo UPnP API. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/bashlite-iot-malware-updated-with-mining-and-backdoor-commands-targets-wemo-devices Updated: 2026-08-12 Category: blog --- ## Beauty Camera Apps Send Users Porn, Collects Pictures > We discovered several beauty camera apps (detected as AndroidOS_BadCamera.HRX) on Google Play that are capable of accessing remote ad configuration servers that can be used for malicious purposes. Some of these have been downloaded millions of times. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/various-google-play-beauty-camera-apps-sends-users-pornographic-content-redirects-them-to-phishing-websites-and-collects-their-pictures Updated: 2026-08-18 Category: blog --- ## Bechtle > [TrendAI Vision One™] enables us to deliver a leading cybersecurity platform in fully sovereign IT environments with full data sovereignty, strategic autonomy, and uncompromising compliance. It’s digital sovereignty at its best –ready for governments, critical infrastructure, and regulated industries. URL: https://www.trendaisecurity.com/en-us/customer-stories/bechtle Updated: 2026-10-16 Category: customerStory --- ## Behind the Great Wall: Void Arachne Targets Chinese-Speaking Users With the Winos 4.0 C&C Framework > We recently discovered a new threat actor group that we dubbed Void Arachne. This group targets Chinese-speaking users with malicious Windows Installer (MSI) files in a recent campaign. These MSI files contain legitimate software installer files for AI software and other popular software but are bundled with malicious Winos payloads. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/behind-the-great-wall-void-arachne-targets-chinese-speaking-user Updated: 2026-09-11 Category: blog --- ## Best Practices: Identifying and Mitigating Phishing Attacks > Despite being one of the oldest scams on the internet, phishing continues to be a significant problem for both individuals and organizations. Here are some methods to identify and deal with potential phishing attempts. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/best-practices-identifying-and-mitigating-phishing-attacks Updated: 2026-08-05 Category: research --- ## Beware of MCP Hardcoded Credentials: A Perfect Target for Threat Actors > Poor secret management in MCP servers can lead to serious consequences, including data breaches and supply chain attacks. This article examines the reality of these unsecure configurations and offers practical recommendations that minimize the chances of exposure. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/beware-of-mcp-hardcoded-credentials-a-perfect-target-for-threat-actors Updated: 2026-08-05 Category: research --- ## Beyond Model Alignment: Securing Every Layer of the AI Agent > Alignment makes a model well-intentioned, but it can’t secure the harness, tools, and data an agent touches in production. Real agent security means governing every layer with enforcement the agent itself can’t switch off. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/beyond-model-alignment-securing-every-layer-of-the-ai-agent Updated: 2026-10-01 Category: blog --- ## Billion-Dollar Scams: The Numbers Behind Business Email Compromise > Business Email Compromise schemes are one of the biggest threats to companies to date. One carefully crafted email sent to the right person can cost a company millions of dollars. How is it done and what makes it so effective? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/billion-dollar-scams-the-numbers-behind-business-email-compromise Updated: 2026-08-05 Category: research --- ## Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike > We analyzed a QAKBOT-related case leading to a Brute Ratel C4 and Cobalt Strike payload that can be attributed to the threat actors behind the Black Basta ransomware. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/black-basta-infiltrates-networks-via-qakbot-brute-ratel-and-coba Updated: 2026-10-12 Category: blog --- ## Blackhat > Meet TrendAI™ at Black Hat USA 2026. Explore the AI Summit, compete in threat hunt challenges, and go hands-on with TrendAI™ Vision One™. URL: https://www.trendaisecurity.com/en-us/events/blackhat Updated: 2026-08-01 --- ## Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601 > Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601). URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/blocking-a-curveball-pocs-out-for-critical-microsoft-nsa-bug-cve-2020-0601 Updated: 2026-10-09 Category: research --- ## Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses > In this blog entry, Trend™ Research explores how ransomware actors are shifting their focus to cloud-based assets, including the tactics used to compromise business-critical data in AWS environments. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/s3-ransomware Updated: 2026-08-27 Category: blog --- ## Bridging Divides, Transcending Borders: The Current State of the English Underground > The English-speaking cybercriminal underground market has undergone significant transformations. We examine how it has adapted to new technology, increased law enforcement scrutiny, and linguistic diversification. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/bridging-divides-transcending-borders-the-current-state-of-the-english-underground Updated: 2026-10-01 Category: research --- ## Bridging Security Gaps in WFH and Hybrid Setups > Remote and hybrid workplaces are now the norm. We highlight some risks and threats to these setups and detail recommendations for organizations to keep their diffused labor pool secure. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/bridging-security-gaps-in-wfh-and-hybrid-setups Updated: 2026-09-18 Category: research --- ## Building Resilience: 2024 Security Predictions for the Cloud > We delve into the multifaceted nature of cloud cyberthreats in 2024, from the stealthy dangers of data poisoning in machine learning models to the complexities of securing APIs, and more. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/building-resilience-2024-security-predictions-for-the-cloud Updated: 2026-10-01 Category: research --- ## Building Sovereign AI: Technical Considerations for Foundation and Architecture > Governments around the world are committing billions to domestic AI development, but the race to create sovereign AI strategies has outpaced a clear understanding of what sovereignty actually requires. This research offers government and enterprise leaders a practical, layer-by-layer framework for determining how sovereign they need to be, and where it matters most. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/building-sovereign-ai-technical-considerations-for-foundation-and-architecture Updated: 2026-08-08 Category: research --- ## CES 2025: A Comprehensive Look at AI Digital Assistants and Their Security Risks > In this entry, we mapped the capabilities of various AI digital assistants that were showcased at CES 2025 based on an assessment matrix we developed to determine how this emerging technology holds up against potential security threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ces-2025-a-comprehensive-look-at-ai-digital-assistants-and-their-security-risks Updated: 2026-08-13 Category: research --- ## CISOs in a Pinch: A Security Analysis of OpenClaw > Learn about OpenClaw (a sovereign agent) and how this can be viable for enterprises. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cisos-in-a-pinch-a-security-analysis-openclaw Updated: 2026-08-20 Category: blog --- ## COVID-19 Used in Malicious Campaigns > Threat actors take advantage of the spread of COVID-19 for malicious campaigns. Goods and services related to the virus also appear in underground marketplaces and cybercriminal forums. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/coronavirus-used-in-spam-malware-file-names-and-malicious-domains Updated: 2026-08-05 Category: research --- ## CSO Insights: DataBank’s Mark Houpt on Looking Beyond Securing Infrastructures in the New Normal > Mark Houpt, Chief Information Security Officer of DataBank, provides security insights that highlight challenges and learnings from both corporate and customer perspectives. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cso-insights-databank-mark-houpt-on-looking-beyond-securing-infrastructures-in-the-new-normal Updated: 2026-10-02 Category: research --- ## CSO Insights: Liggett Consulting’s Mark Liggett on Connectivity and Visibility in Securing Remote Work > Mark Liggett, CEO of Liggett Consulting and longtime IT and cybersecurity key player, sits down with Trend Micro to share his thoughts on the importance of taking into account connectivity and visibility in securing WFH setups. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cso-insights-liggett-consulting-s-mark-liggett-on-connectivity-and-visibility-in-securing-remote-work Updated: 2026-10-08 Category: research --- ## CSO Insights: Ricoh USA’s David Levine on Employing a Cloud- and Cybersecurity-First Strategy > David Levine, Vice President of Corporate and Information Security and CSO for Ricoh USA, Inc., shares his thoughts on reinforcing a security mindset in the organization and how a cloud-first strategy helps enable their operations in the "new normal" URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cso-insights-ricoh-usa-s-david-levine-on-employing-a-cloud-and-cybersecurity-first-strategy Updated: 2026-10-09 Category: research --- ## CSO Insights: SBV’s Ian Keller on the Challenges and Opportunities of Working Remotely > Ian Keller, Chief Security Officer of SBV Services in South Africa, recently sat down with Trend Micro and shared his thoughts on how his organization is coping with the current pandemic. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cso-insights-sbv-s-ian-keller-on-the-challenges-and-opportunities-of-working-remotely Updated: 2026-10-08 Category: research --- ## CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign > This blog delves into the Phemedrone Stealer campaign's exploitation of CVE-2023-36025, the Windows Defender SmartScreen Bypass vulnerability, for its defense evasion and investigates the malware's payload. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal Updated: 2026-10-06 Category: blog --- ## CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits > We uncovered the active exploitation of the Apache ActiveMQ vulnerability CVE-2023-46604 to download and infect Linux systems with the Kinsing malware (also known as h2miner) and cryptocurrency miner. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cve-2023-46604-exploited-by-kinsing Updated: 2026-09-11 Category: blog --- ## CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day > The APT group Water Hydra has been exploiting the Microsoft Defender SmartScreen vulnerability CVE-2024-21412 in its campaigns targeting financial market traders. This vulnerability, which has now been patched by Microsoft, was discovered and disclosed by the Trend Micro Zero Day Initiative. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cve202421412-water-hydra-targets-traders-with-windows-defender-s Updated: 2026-10-15 Category: blog --- ## CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks > Our threat hunters discovered CVE-2024-38112, which was used as a zero-day by APT group Void Banshee, to access and execute files through the disabled Internet Explorer using MSHTML. We promptly identified and reported this zero-day vulnerability to Microsoft, and it has been patched. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/CVE-2024-38112-void-banshee Updated: 2026-10-15 Category: blog --- ## CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks > The ZDI team offers an analysis of how CVE-2025-0411, a zero-day vulnerability in 7-Zip was actively exploited to target Ukrainian organizations through spear-phishing and homoglyph attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cve-2025-0411-ukrainian-organizations-targeted Updated: 2026-10-12 Category: blog --- ## CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation > CVE-2025-55182 is a CVSS 10.0 pre-authentication RCE affecting React Server Components. Amid the flood of fake proof-of-concept exploits, scanners, exploits, and widespread misconceptions, this technical analysis intends to cut through the noise. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/CVE-2025-55182-analysis-poc-itw Updated: 2026-09-11 Category: blog --- ## Can You Rely on OTPs? A Study of SMS PVA Services and Their Possible Criminal Uses > SMS PVA services allow their customers to create disposable user profiles or register verified accounts on many popular platforms. Unfortunately, criminals can misuse these services to conduct fraud or other malicious activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/can-you-rely-on-otps-a-study-of-sms-pva-services-and-possible-criminal-uses Updated: 2026-10-05 Category: research --- ## Cape Cod Healthcare > TrendAI Vision One™ connects vulnerability data to the assets and identities most critical to patient care, so the team can prioritize what matters most rather than chasing every alert. For devices that can’t be patched or run agents, virtual patching steps in to cover the gap. URL: https://www.trendaisecurity.com/en-us/customer-stories/cape-cod-healthcare Updated: 2026-09-28 Category: customerStory --- ## Caught in the Crossfire: Defending Devices From Battling Botnets > As cybercriminals compete for dominance in their bid to create powerful botnets, users can make their own stand against warring sides by understanding how botnet malware works and securing their devices. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/caught-in-the-crossfire-defending-devices-from-battling-botnets Updated: 2026-08-08 Category: research --- ## Cellular IoT Vulnerabilities: Another Door to Cellular Networks > Cellular IoT vulnerabilities show an increasing trend over the years, indicating that these devices are becoming more and more popular — and that they are being targeted more frequently. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cellular-iot-vulnerabilities-another-door-to-cellular-networks Updated: 2026-08-10 Category: research --- ## Cloud Risk Management > Unify multi-cloud visibility, simplify exposure management, and secure your future with TrendAI Vision One™ Cloud Risk Management. URL: https://www.trendaisecurity.com/en-us/platform/cloud-security/cloud-risk-management Updated: 2026-10-16 Category: platform --- ## Cloud Security > Confidently and quickly identify threats and maintain cloud security for hybrid environments by using TrendAI Vision One™. URL: https://www.trendaisecurity.com/en-us/platform/cloud-security Updated: 2026-07-31 Category: platform --- ## Cloud Security: Key Concepts, Threats, and Solutions > When it comes to cloud computing security, or simply, cloud security, what are the builders’ responsibilities? How can developers and administrators ensure cloud security? This primer discusses the key concepts of cloud security and which areas need to be protected using flexible and comprehensive security solutions.  URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cloud-security-key-concepts-threats-and-solutions Updated: 2026-08-11 Category: research --- ## Code Security > Proactive protection for every phase of the software development lifecycle. URL: https://www.trendaisecurity.com/en-us/platform/cloud-security/code-security Updated: 2026-10-16 Category: platform --- ## Coinminer, DDoS Bot Attack Docker Daemon Ports > A malicious cryptocurrency miner and Distributed Denial of Service (DDoS) bot that targets open Docker daemon ports. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/coinminer-ddos-bot-attack-docker-daemon-ports Updated: 2026-08-05 Category: research --- ## Coinminers Exploit SaltStack Vulnerabilities CVE-2020-11651 and CVE-2020-11652 > We analyzed the critical vulnerabilities affecting Salt, their patches, and some threats exploiting them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/coinminers-exploit-saltstack-vulnerabilities-cve-2020-11651-and-cve-2020-11652 Updated: 2026-08-28 Category: research --- ## Commodified Cybercrime Infrastructure: Exploring the Underground Services Market for Cybercriminals > The provision of services, as well as the way criminals operate in the underground, have gone through many changes over the years to cater to the market’s different infrastructure demands. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/commodified-cybercrime-infrastructure-exploring-the-underground-services-market-for-cybercriminals Updated: 2026-08-05 Category: research --- ## Company URL: https://www.trendaisecurity.com/en-us/why-trendai/company Updated: 2026-10-01 Category: about --- ## Complexity and Visibility Gaps in Power Automate > Amid the rise of low-code automation, Microsoft Power Automate is becoming an attractive target for cybercriminals exploiting its complexity to evade detection and exfiltrate data – but demand for compromised enterprise assets is outstripping supply in the cybercriminal underground. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/complexity-and-visibility-gaps-in-power-automate Updated: 2026-08-05 Category: research --- ## Connecting Taidoor’s Dots: Earth Aughisky Over The Last 10 Years > Our research on APT group Earth Aughisky (aka Taidoor) lists the observed malware, connections, and developments attributed to the group. We also include our insights on the possible implications of changes in the organization's activities for their current and future victims. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/connecting-taidoors-dots-earth-aughisky-over-the-last-10-years Updated: 2026-09-18 Category: research --- ## Contact > Have a question about TrendAI Vision One™? Connect with our team for product support, sales inquiries, and expert guidance on securing your enterprise for AI. URL: https://www.trendaisecurity.com/en-us/contact Updated: 2026-07-31 Category: home --- ## Container Security > Simplify security for your cloud-native applications with advanced container image scanning, policy-based admission control, and container runtime protection. URL: https://www.trendaisecurity.com/en-us/platform/cloud-security/container-security Updated: 2026-10-16 Category: platform --- ## Container Security: Examining Potential Threats to the Container Environment > The rise in adoption of containers means a greater need for security awareness. Our infographic details the various threats that container users could encounter at each stage of the development pipeline. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/container-security-examining-potential-threats-to-the-container-environment Updated: 2026-08-06 Category: research --- ## Copenhagen Airports > We just don’t have the personnel for round-the-clock monitoring. Managed detection and response gives us the ability to monitor and manage security 24/7—something we simply cannot do on our own. URL: https://www.trendaisecurity.com/en-us/customer-stories/copenhagen-airports Updated: 2026-08-27 Category: customerStory --- ## Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries > We look into a stealthy multi‑stage attack campaign that delivers PureLog Stealer entirely in memory using encrypted, fileless techniques. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/copyright-lures-mask-a-multistage-purelog-stealer-attack Updated: 2026-08-20 Category: blog --- ## Corporate Social Responsibility > Learn how TrendAI™ participates in corporate social responsibility. URL: https://www.trendaisecurity.com/en-us/corporate-social-responsibility Updated: 2026-09-24 Category: about --- ## Countering AI-Driven Threats With AI-Powered Defense > Businesses worldwide are increasingly moving to the cloud. The demand for remote work, for instance, has driven a surge in cloud-based services, offering companies the flexibility and efficiency that traditional data centers often lack. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/countering-ai-driven-threats-with-ai-powered-defense Updated: 2026-10-12 Category: research --- ## Cracking the Isolation: Novel Docker Desktop VM Escape Techniques Under WSL2 > TrendAI™ Research has discovered several new methods that enable attackers to escape Docker Desktop's WSL2 VM and run arbitrary code on the host. Our analysis highlights how trusted development tooling can create unexpected attack surfaces when internal APIs and configuration mechanisms are left exposed. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cracking-the-isolation-novel-docker-desktop-vm-escape-techniques-under-wsl2 Updated: 2026-08-05 Category: research --- ## Crafting an Azure App Services Threat Model > We looked into Azure App Services and created a threat model to mitigate the impact of threats on the infrastructure and applications. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/crafting-an-azure-app-services-threat-model Updated: 2026-09-28 Category: research --- ## Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation > The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/critical-infrastructure-under-threat-how-frontier-ai-changes-the-risk-equation Updated: 2026-09-25 Category: research --- ## Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet > This blog uncovers an active campaign exploiting CVE-2025-3248 in Langflow versions before 1.3.0 that deploys the Flodrix botnet, enabling threat actors to achieve full system compromise, initiate DDoS attacks, and potentially exfiltrate sensitive data. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/langflow-vulnerability-flodric-botnet Updated: 2026-10-12 Category: blog --- ## Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know > CVE-2025-55182 is a critical (CVSS 10.0) pre-authentication remote code execution vulnerability affecting React Server Components used in React.js, Next.js, and related frameworks (see the context section for a more exhaustive list of affected frameworks). URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/critical-react-server-components-vulnerability Updated: 2026-09-11 Category: blog --- ## Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks > Crypto24 is a ransomware group that stealthily blends legitimate tools with custom malware, using advanced evasion techniques to bypass security and EDR technologies. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/crypto24-ransomware-stealth-attacks Updated: 2026-08-27 Category: blog --- ## Cryptocurrency Miner Uses Hacking Tool Haiduc and App Hider Xhide to Brute Force Machines and Servers > The cryptocurrency-miner, a multi-component threat comprised of different Perl and Bash scripts, miner binaries, the application hider Xhide, and a scanner tool, propagates by scanning vulnerable machines and brute-forcing (primarily default) credentials. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cryptocurrency-miner-uses-hacking-tool-haiduc-and-app-hider-xhide-to-brute-force-machines-and-servers Updated: 2026-08-05 Category: research --- ## Cryptocurrency-mining Malware Targets Linux Systems, Uses Rootkit for Stealth > We recently encountered a cryptocurrency-mining malware affecting Linux systems. It is notable for being bundled with a rootkit component that hides the malicious process’ presence from monitoring tools. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cryptocurrency-mining-malware-targets-linux-systems-uses-rootkit-for-stealth Updated: 2026-08-05 Category: research --- ## Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem > We provide a technical analysis on how CVE-2023-22527 can be exploited by malicious actors for cryptojacking attacks that can spread across the victim’s system. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cve-2023-22527-cryptomining Updated: 2026-09-30 Category: blog --- ## Customer Awards URL: https://www.trendaisecurity.com/en-us/about/customer-stories/customer-awards Updated: 2026-09-24 Category: about --- ## Customer Excellence Awards URL: https://www.trendaisecurity.com/en-us/about/customer-stories/excellence-awards Updated: 2026-09-24 Category: about --- ## Cyber Considerations for Organizations During Times of Conflict > This article provides a comprehensive overview of the necessary adjustments and strategies CISOs need to implement to safeguard their organizations’ assets, maintain business continuity, and uphold public trust amid conflict situations. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cyber-considerations-for-organizations-during-times-of-conflict Updated: 2026-08-14 Category: research --- ## Cyber Risk Exposure Management > Proactively uncover, predict, and mitigate cyber risks while prioritizing impact, reducing exposure, and building lasting cyber resilience. URL: https://www.trendaisecurity.com/en-us/platform/cyber-risk-exposure-management Updated: 2026-10-16 Category: platform --- ## Cyberattacks from the Frontlines: Incident Response Playbook for Beginners > In the event of a cyberattack a strong incident response plan can get a business running again with minimal damages. Understand the response process in this playbook. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cyberattacks-from-the-frontlines-incident-response-playbook-for-beginners Updated: 2026-08-24 Category: research --- ## Cybercrime Group Uses G Suite, Physical Checks in BEC Scam > A cybercrime group named Exaggerated Lion uses GSuite request for checks coursed through check mules. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cybercrime-group-uses-g-suite-physical-checks-in-bec-scam Updated: 2026-10-09 Category: research --- ## Cybercriminal ‘Cloud of Logs’: The Emerging Underground Business of Selling Access to Stolen Data > We take a closer look at an emerging underground market that is driven by malicious actors who sell access to a gargantuan amount of stolen data, frequently advertised in the underground as “cloud of logs." URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cybercriminal-cloud-of-logs-the-emerging-underground-business-of-selling-access-to-stolen-data Updated: 2026-08-05 Category: research --- ## Cybercriminals Gamble With Victims' Livelihoods To Pass the Covid-19 Blues > Our underground monitoring revealed several ways how criminals have been entertaining themselves during isolation, with normal activities that offer cyber-crime-related prizes. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cybercriminals-gamble-with-victims-livelihoods-to-pass-the-covid-19-blues Updated: 2026-10-02 Category: research --- ## Cybercriminals kick-off 2021 with sweepstakes, credit card, delivery scams > We discuss the behaviors and external indicators of some phishing campaigns that we observed from the latter part of December 2020 to the first weeks of January 2021. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cybercriminals-kick-off-2021-with-sweepstakes-credit-card-delivery-scams Updated: 2026-10-02 Category: research --- ## Cybersecurity Under Strain of SecOps Pain Points > In this first installment in our series on the challenges of the cybersecurity industry, we explore the underlying causes of the workforce gaps that have long plagued SOC teams. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/cybersecurity-under-strain-of-secops-pain-points Updated: 2026-09-17 Category: research --- ## DPCDSB > Having MDR in place is critical. It gives us peace of mind, knowing we have a partner available monitoring our environment 24/7. URL: https://www.trendaisecurity.com/en-us/customer-stories/dpcdsb Updated: 2026-09-28 Category: customerStory --- ## Dark Motives Online: An Analysis of Overlapping Technologies Used by Cybercriminals and Terrorist Organizations > Research on the common technologies used by cybercriminals and terrorists to benefit their cause, from the services they abuse to the tools they’ve homebrewed to streamline activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/overlapping-technologies-cybercriminals-and-terrorist-organizations Updated: 2026-08-14 Category: research --- ## Data Breaches 101: How They Happen, What Gets Stolen, and Where It All Goes > Data breaches take time and a lot of effort to pull off, but successful breaches can affect not just organizations, but also millions of people. Learn what a data breach is, what types of data is usually stolen, and what happens to stolen data. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/data-breach-101 Updated: 2026-08-05 Category: research --- ## Data Security > Handle all your company's data security and privacy solution needs in the cloud with TrendAI Vision One™ Data Security. URL: https://www.trendaisecurity.com/en-us/platform/data-security Updated: 2026-07-10 Category: platform --- ## Data of U.K. Train Commuters Leak from Misconfigured AWS Cloud Storage > An unsecured Amazon Web Services (AWS) cloud storage bucket leaked the data of commuters in the U.K. who use the free Wi-Fi in train stations. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/data-of-u-k-train-commuters-leak-from-misconfigured-aws-cloud-storage Updated: 2026-10-09 Category: research --- ## DataBank > Fortifies its fast-growing data center business with TrendAI™ TippingPoint URL: https://www.trendaisecurity.com/en-us/customer-stories/databank Updated: 2026-10-16 Category: customerStory --- ## Decathlon URL: https://www.trendaisecurity.com/en-us/customer-stories/decathlon Updated: 2026-07-10 Category: customerStory --- ## Deepfake It ‘til You Make It: A Comprehensive View of the New AI Criminal Toolset > This report takes a comprehensive look at how deepfakes are used to support criminal business processes, what are the toolkits criminals are exploiting to power their deepfake creation, and what the deepfake underground looks like. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/deepfake-it-til-you-make-it-a-comprehensive-view-of-the-new-ai-criminal-toolset Updated: 2026-08-05 Category: research --- ## Dell URL: https://www.trendaisecurity.com/en-us/customer-stories/dell Updated: 2026-07-10 Category: customerStory --- ## Delving into the World of Business Email Compromise (BEC) > We looked at BEC-related incidents over a span of nine months to see emerging and present trends from BEC incidents, examine the tools and techniques used by cybercriminals, and analyze the data to give us an overall picture of what BEC looks like today. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/delving-into-the-world-of-business-email-compromise-bec Updated: 2026-08-18 Category: research --- ## Deployment Options > Explore TrendAI Vision One™ deployment options across SaaS, sovereign and private cloud, and on-premises environments for greater security, compliance, and control. URL: https://www.trendaisecurity.com/en-us/platform/deployment-options Updated: 2026-10-16 Category: platform --- ## Digmine Miner Spreading via Facebook Messenger > A new cryptocurrency-mining bot is spreading through Facebook Messenger. We named this Digmine based on the moniker (비트코인 채굴기 bot) it was referred to in a report of recent related incidents in South Korea. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/digmine-cryptocurrency-miner-spreading-via-facebook-messenger Updated: 2026-08-14 Category: blog --- ## Distributed Energy Generation Gateway (In)Security > Distributed energy generation (DEG) is a term used to describe the shift from centralized energy generation, such as power companies, to a source — typically a renewable energy source — closer to the user. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/distributed-energy-generation-gateway-insecurity Updated: 2026-10-01 Category: research --- ## Diving Deep Into Quantum Computing: Computing With Quantum Mechanics > In this entry, the second in our series on post-quantum cryptography, we delve into the history of quantum computing, its foundation in quantum mechanics, and the kind of complex problems quantum computers will be able to solve. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/diving-deep-into-quantum-computing-computing-with-quantum-mechanics Updated: 2026-08-14 Category: research --- ## Diving Deep Into Quantum Computing: Modern Cryptography > In our first installment of a four-part series on post-quantum cryptography, we discuss contemporary cryptography and what defenders should know when it comes to developing a quantum-resistant cryptography plan. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/diving-deep-into-quantum-computing-modern-cryptography Updated: 2026-09-17 Category: research --- ## Diving Into End-to-End Deep Learning for Cybersecurity > We look into developments in end-to-end deep learning for cybersecurity and provide insights into its current and future effectiveness. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/end-to-end-deep-learning-cybersecurity Updated: 2026-10-09 Category: research --- ## Do Security Blogs Enable Vibe-Coded Cybercrime? > Security companies routinely publish detailed analyses of security incidents, making attacker tactics, techniques, and procedures (TTPs) widely known and visible. These reports often provide comprehensive insights into specific vulnerabilities that are or could be exploited, malware delivery mechanisms, and evasion techniques. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/do-security-blogs-enable-vibe-coded-cybercrime Updated: 2026-07-24 Category: research --- ## Docker Content Trust: What It Is and How It Secures Container Images > Can your container image be trusted? Learn how Docker Content Trust (DCT) employs digital signatures for container image verification and manages trusted collections of content. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/docker-content-trust-what-it-is-and-how-it-secures-container-images Updated: 2026-10-02 Category: research --- ## Driving Security at the Speed of AI Agents with NVIDIA DOCA > Agentic AI compresses exploit timelines from weeks to hours, and reactive security can't keep pace. TrendAI™, working with NVIDIA, delivers an isolated trust architecture purpose-built for AI infrastructure, hardening AI factories before attackers find a way in. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/driving-security-at-the-speed-of-ai-agents-with-nvidia-doca Updated: 2026-08-11 Category: research --- ## Dymalloy, Electrum, and Xenotime Hacking Groups Set Their Targets on US Energy Sector > At least three hacking groups have been identified aiming to interfere with or disrupt power grids across the United States. Attempts in attacking the utilities industry are on the rise, according to a report on the state of industrial control systems (ICSs). URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/dymalloy-electrum-and-xenotime-hacking-groups-set-their-targets-on-us-energy-sector Updated: 2026-10-09 Category: research --- ## Dynamic Challenges to Threat Detection and Endpoint Security — And How to Overcome Them > Advancements in technology continue to grow — and so do the techniques of cyberthreats. Learn how organizations can keep their evolving environments protected through dynamic and advanced security solutions. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/dynamic-challenges-to-threat-detection-and-endpoint-security-and-how-to-overcome-them Updated: 2026-10-09 Category: research --- ## Earth Ammit Disrupts Drone Supply Chains Through Coordinated Multi-Wave Attacks in Taiwan > Trend™ Research discusses the evolving tradecraft of threat actor Earth Ammit, proven by the advanced toolset used in its TIDRONE and VENOM campaigns that targeted the drone supply chain. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-ammit Updated: 2026-10-15 Category: blog --- ## Earth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign > Our research provides a detailed analysis of the new tools and techniques used by Earth Baku in its cyberespionage campaign against organizations in the Indo-Pacific region. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/earth-baku-returns Updated: 2026-08-05 Category: research --- ## Earth Estries Targets Government, Tech for Cyberespionage > We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures (TTPs) employed, we observed overlaps with the advanced persistent threat (APT) group FamousSparrow as Earth Estries targets governments and organizations in the technology sector. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-estries-targets-government-tech-for-cyberespionage Updated: 2026-10-12 Category: blog --- ## Earth Kurma APT Campaign Targets Southeast Asian Government, Telecom Sectors > An APT group dubbed Earth Kurma is actively targeting government and telecommunications organizations in Southeast Asia using advanced malware, rootkits, and trusted cloud services to conduct cyberespionage. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-kurma-apt-campaign Updated: 2026-10-06 Category: blog --- ## Earth Lamia Develops Custom Arsenal to Target Multiple Industries > Trend™ Research has been tracking an active APT threat actor named Earth Lamia, targeting multiple industries in Brazil, India and Southeast Asia countries at least since 2023. The threat actor primarily exploits vulnerabilities in web applications to gain access to targeted organizations. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-lamia Updated: 2026-10-06 Category: blog --- ## Earth Preta Spear-Phishing Governments Worldwide > We break down the cyberespionage activities of advanced persistent threat (APT) group Earth Preta, observed in large-scale attack deployments that began in March. We also show the infection routines of the malware families they use to infect multiple sectors worldwide: TONEINS, TONESHELL, and PUBLOAD. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-preta-spear-phishing-governments-worldwide Updated: 2026-10-12 Category: blog --- ## Earth Simnavaz (aka APT34) Levies Advanced Cyberattacks Against Middle East > Trend Micro's investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to sectors in the Middle East. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-simnavaz-cyberattacks Updated: 2026-10-06 Category: blog --- ## Earth Sirrush: A Russia-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling > Earth Sirrush has repeatedly changed its tools and delivery methods, but TrendAI™ Research reveals how shared code, reused artifacts, and infrastructure patterns continue to expose the links between its campaigns. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-sirrush-russia-aligned-intrusion-set-4-years-evolving-espionage-tooling Updated: 2026-10-06 Category: blog --- ## Edge Under Siege: How State-Sponsored Actors Exploit Your Perimeter > Edge devices have become a primary entry point for state-sponsored espionage, giving attackers a cheaper, faster path to network access, credential theft, and traffic interception. Our report examines the threat landscape, economics, and actor activity driving this shift, along with what CISOs and security leaders can do to respond. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/edge-under-siege-how-state-sponsored-actors-exploit-your-perimeter Updated: 2026-08-21 Category: research --- ## Education > AI-driven cybersecurity for school districts and universities. FERPA, COPPA, CIPA compliant. E-Rate eligible. 70% cost reduction. URL: https://www.trendaisecurity.com/en-us/solutions/education Updated: 2026-10-16 Category: solution --- ## Email Security > Stop phishing, ransomware, & targeted attacks on any email service, including Microsoft 365 and Google Workspace, using our threat defense techniques. URL: https://www.trendaisecurity.com/en-us/platform/email-security Updated: 2026-07-10 Category: platform --- ## Emotet Now Spreads via Wi-Fi > Before, the Emotet malware mostly spread through spam campaigns. Now, it can also propagate via Wi-Fi. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/emotet-now-spreads-via-wi-fi Updated: 2026-10-09 Category: research --- ## Emotet Uses Coronavirus Scare in Latest Campaign, Targets Japan > Cybercriminals used the 2019-nCoV scare to trick people into downloading email attachments that carry the Emotet malware. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/emotet-uses-coronavirus-scare-in-latest-campaign-targets-japan Updated: 2026-10-09 Category: research --- ## Endpoint Security > Comprehensive threat protection across your entire environment. URL: https://www.trendaisecurity.com/en-us/platform/endpoint-security Updated: 2026-07-31 Category: platform --- ## Enhancing Software Supply-Chain Security: Navigating SLSA Standards and the MITRE ATT&CK Framework > Attackers abuse different supply-chain scenarios to indirectly compromise organizations and applications. We delve into how a software pipeline works, where attacks could come from, and how to improve security. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/enhancing-software-supply-chain-security-navigating-slsa-standards-and-the-mitre-att-and-ck-framework Updated: 2026-08-11 Category: research --- ## Erebus Linux Ransomware: Impact to Servers and Countermeasures > A South Korean web hosting company was hit by a Linux version of the Erebus ransomware. Here’s what you need to know about the threat and what sysadmins can do to defend against it. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/erebus-linux-ransomware-impact-to-servers-and-countermeasures Updated: 2026-08-14 Category: research --- ## Estimating Future Risk Outbreaks at Scale in Real-World Deployments > Trend™ Research introduces a novel system that leverages AI and behavioral analytics to proactively estimate the risk of future malware outbreaks based on users’ behavior to help organizations strategically strengthen their defenses. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/estimating-future-risk-outbreaks-at-scale-in-real-world-deployments Updated: 2026-08-05 Category: research --- ## Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations > Tycoon 2FA was dismantled this week by law enforcement and industry partners including TrendAI™. The phishing-as-a-service platform offered MFA bypass services using adversary-in-the-middle (AitM) proxying. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/tycoon2fa-takedown Updated: 2026-08-18 Category: blog --- ## EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks > Combining AI-generated code and social engineering, EvilAI operators are executing a rapidly expanding campaign, disguising their malware as legitimate applications to bypass security, steal credentials, and persistently compromise organizations worldwide. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/evilai Updated: 2026-08-19 Category: blog --- ## Examining Erratic Modern Ransomware Activities: Ransomware in Q3 2021 > This latest report examines the landscape of ransomware families, both legacy and more modern threats, in the third quarter of 2021. Our tracking and investigation covered the families themselves and the types of industries and enterprises that were targeted. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/examining-erratic-modern-ransomware-activities-ransomware-in-q3-2021 Updated: 2026-10-07 Category: research --- ## Excel Files with Hidden Sheets Target Users in Italy > A spam campaign using emails that have Excel file (.xls) attachments has been seen circulating and targeting users in Italy. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/excel-files-with-hidden-sheets-target-users-in-italy Updated: 2026-10-06 Category: research --- ## Exploiting AI: How Cybercriminals Misuse and Abuse AI and ML > We discuss the present state of the malicious uses and abuses of AI and ML and the plausible future scenarios in which cybercriminals might abuse these technologies for ill gain. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exploiting-ai-how-cybercriminals-misuse-abuse-ai-and-ml Updated: 2026-08-21 Category: research --- ## Exploiting Trust in Open-Source AI: The Hidden Supply Chain Risk No One Is Watching > As open-source AI models become foundational to digital infrastructure, hidden backdoors and tampered supply chains pose a growing, under-recognized threat that traditional security tools can fail to detect. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exploiting-trust-in-open-source-ai-the-hidden-supply-chain-risk-no-one-is-watching Updated: 2026-08-05 Category: research --- ## Exploring Common Threats to Cloud Security > As the adoption of cloud services grows, organizations need to be informed about how to secure their environment. Our research examines the common threats encountered in the cloud and provides insight on how organizations can better deal with them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exploring-common-threats-to-cloud-security Updated: 2026-08-05 Category: research --- ## Exploring Potential Security Challenges in Microsoft Azure > Our research identifies sensitive environmental variables in the Microsoft Azure environment that, when leaked, can be used by malicious actors to compromise the entire serverless environment. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exploring-potential-security-challenges-in-microsoft-azure Updated: 2026-09-28 Category: research --- ## Exposed Container Registries: A Potential Vector for Supply-Chain Attacks > In this entry, we will discuss publicly exposed registries, which are repositories or databases containing information accessible to the public without the need for authentication. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exposed-container-registries-a-potential-vector-for-supply-chain-attacks Updated: 2026-09-16 Category: research --- ## Exposing Earth Berberoka: A Multiplatform APT Campaign Targeting Online Gambling Sites > Our research uncovers the tools and techniques used by Earth Berberoka across different platforms to target online gambling sites. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exposing-earth-berberoka-a-multiplatform-apt-campaign-targeting-online-gambling-sites Updated: 2026-08-05 Category: research --- ## FBI Warns Public on Dangers of the Internet of Things > The FBI released a Public Service Announcement that warns about the potential security risks of the IoT. Learn more about these risks and their real-life consequences. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/fbi-warns-public-on-dangers-of-the-internet-of-things Updated: 2026-08-11 Category: research --- ## Fake Banking App Found on Google Play Used in SMiShing > As users start to look for apps and other services from their banks, opportunities for scammers also increase. One recent example of this is the app Movil Secure, part of a SMiShing scheme targeting Spanish-speaking users. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/fake-banking-app-found-on-google-play-used-in-smishing-scheme Updated: 2026-08-12 Category: blog --- ## Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain > We have detected a new tactic involving fake CAPTCHA pages that trick users into executing harmful commands in Windows. This scheme uses disguised files sent via phishing and other malicious methods. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/unmasking-fake-captcha-cases Updated: 2026-08-20 Category: blog --- ## Fake Company, Real Threats: Logs From a Smart Factory Honeypot > To determine threat actors' degree of knowledge in compromising a smart factory, we deployed our most elaborate honeypot to date. The incidents we observed show the kinds of attacks that can easily affect poorly secured manufacturing environments. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/fake-company-real-threats-logs-from-a-smart-factory-honeypot Updated: 2026-08-06 Category: research --- ## Fake Dating Apps Found as Top Source of Malware in Africa > Fake dating apps were cited as one of the most notable sources of #malware in Africa, with 7,000 attacks detected in 2019. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/fake-dating-apps-found-as-top-source-of-malware-in-africa Updated: 2026-10-09 Category: research --- ## Fake Messaging App Installers Promoted on Fraudulent Download Sites, Target Russian Users > Fake installers of popular messaging apps such as Viber and WhatsApp are propagated via fraudulent Russian websites. The installers are believed to be adware. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/fake-messaging-app-installers-promoted-on-fraudulent-download-sites-target-russian-users Updated: 2026-10-07 Category: research --- ## Fake News and Cyber Propaganda: The Use and Abuse of Social Media > This research paper explores the tools and methods used to spread fake news and manipulate public opinion: the services that enable them, their appearance on social media sites, and the motivations behind these activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/fake-news-cyber-propaganda-the-abuse-of-social-media Updated: 2026-08-05 Category: research --- ## Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities > TrendAI™ Research examines the latest version of the Vidar stealer, which features a full rewrite in C, a multithreaded architecture, and several enhancements that warrant attention. Its timely evolution suggests that Vidar is positioning itself to occupy the space left after Lumma Stealer’s decline. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/how-vidar-stealer-2-upgrades-infostealer-capabilities Updated: 2026-08-27 Category: blog --- ## File Security > Protect application workflow and cloud storage against advanced threats URL: https://www.trendaisecurity.com/en-us/platform/cloud-security/file-security Updated: 2026-10-16 Category: platform --- ## Financial Services > TrendAI™ delivers AI cybersecurity for financial services, securing payments, accounts, and data across regulated banking and fintech environments. URL: https://www.trendaisecurity.com/en-us/solutions/financial-services Updated: 2026-10-16 Category: solution --- ## Fischer Homes > We’re not scared of AI, but we need to make sure we have the right controls; after reading what [TrendAI Vision One™] could do, it was a no-brainer. URL: https://www.trendaisecurity.com/en-us/customer-stories/fischer-homes Updated: 2026-07-10 Category: customerStory --- ## Follow the Data: Dissecting Data Breaches and Debunking the Myths > A decade's worth of breaches has led to this. Forward-looking threat researcher Numaan Huq analyzes what has happened to the stolen data affecting major US industries. We map out the probabilities; see where the information goes and how much it's sold. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/follow-the-data Updated: 2026-08-05 Category: research --- ## Foodstuffs South Island > We can see into the environment in a way we never had before, helping us to manage our posture. TrendAI Vision One™ improved visibility by 1,000% URL: https://www.trendaisecurity.com/en-us/customer-stories/foodstuffs-south-island Updated: 2026-07-10 Category: customerStory --- ## Forecasting Future Outbreaks: A Behavioral and Predictive Approach to Proactive Cyber Risk Management > TrendAI™ Research has found that user behaviors and machine usage patterns are key drivers of malware risk. This study’s analysis of over 10 million endpoints confirms that risk is highly context-dependent and offers insights into how organizations can pivot to improve their security posture. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/forecasting-future-outbreaks-a-behavioral-and-predictive-approach-to-proactive-cyber-risk-management Updated: 2026-08-05 Category: research --- ## Free Trial > Start your free trial to see proactive security for the AI age: real-time insight, clear risk prioritization, and the ability to act before threats hit. URL: https://www.trendaisecurity.com/en-us/platform/free-trial Updated: 2026-10-16 Category: platform --- ## From Anarchy to Authority: Closing the Governance Gap in Agentic AI > Agentic AI marks a fundamental shift that enables autonomous action and decision-making across enterprise systems but also introduces new, complex risks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-anarchy-to-authority-closing-the-governance-gap-in-agentic-ai Updated: 2026-08-15 Category: research --- ## From Bounty to Exploit: Cybercriminals Use Crowdsourcing for New Attacks > From articles to hackathons, cybercriminals are resorting to crowdsourcing to find more ways to exploit systems. In this article, we tackle these contests, explore their results, and anticipate their possible impacts on the work of cybersecurity defenders. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-bounty-to-exploit-cybercriminals-use-crowdsourcing-for-new-attacks Updated: 2026-09-17 Category: research --- ## From Defense to Offense: The Misuse of Red Teaming Tools by Cybercriminals > Red teaming tools, which organizations use in cyberattack simulations and security assessments, have become an important cybersecurity component for those looking to strengthen organizational defenses. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-defense-to-offense-the-misuse-of-red-teaming-tools-by-cybercriminals Updated: 2026-08-11 Category: research --- ## From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years > This paper takes a look at Pawn Storm's operations within the last two years, and how the group has expanded their activities from espionage to the use of cyber propaganda tactics. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/espionage-cyber-propaganda-two-years-of-pawn-storm Updated: 2026-08-05 Category: research --- ## From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers > This blog entry provides an in-depth analysis of the multistage delivery of the Evelyn information stealer, which was used in a campaign targeting software developers. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/analysis-of-the-evelyn-stealer-campaign Updated: 2026-08-12 Category: blog --- ## From Holiday Snap to Custom Scam in 30 Minutes: How AI Turns Public Photos Into Targeted Attacks > AI now enables attackers to rapidly convert publicly shared personal images into scalable, highly targeted phishing intelligence, turning everyday online photos into a significant and often overlooked security risk for individuals and enterprises. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-holiday-snap-to-custom-scam-in-30-minutes-how-ai-turns-public-photos-into-targeted-attacks Updated: 2026-08-05 Category: research --- ## From LinkedIn to Tailored Attack in 30 Minutes: How AI Accelerates Target Profiling for Cybercrime > The industrialization of AI-driven OSINT has transformed individual digital footprints into machine-readable intelligence at scale, enabling attackers to operationalize personalized reconnaissance at volume. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-linkedin-to-tailored-attack-in-30-minutes-how-ai-accelerates-target-profiling-for-cybercrime Updated: 2026-08-15 Category: research --- ## From Registries to Private Networks: Threat Scenarios Putting Organizations in Jeopardy > Stolen certificates and private keys could be weaponized by cybercriminals to penetrate a company’s system. Our research investigates how these scenarios would play out, how they affect the organizations, and how to prevent such attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-registries-to-private-networks-threat-scenarios-putting-organizations-in-jeopardy Updated: 2026-09-11 Category: research --- ## From State AI Ecosystems to Global APT Cyberthreats > TrendAI™ Research examines the unique dynamics and factors that influence the adoption of AI in state-aligned APT activity. The report looks into four countries (China, Russia, North Korea, and Iran) to understand why their state-aligned actors adopt AI in the ways that they do. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-state-ai-ecosystems-to-global-apt-cyberthreats Updated: 2026-10-13 Category: research --- ## From Stealers to Systems: The New Model of Credential Theft > Tightening security controls and other underground factors are forcing infostealer operations to adapt. TrendAI™ Research explores their evolution into coordinated attack infrastructure and the implications for identity defense. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-stealers-to-systems-the-new-model-of-credential-theft Updated: 2026-08-13 Category: research --- ## From Vulnerable to Resilient: Cutting Ransomware Risk with Proactive Cyber Risk Exposure Management > This article highlights the critical importance of reducing the Cyber Risk Index, presenting findings that establishes a significant correlation between higher Risk Indices and increased susceptibility to ransomware infections. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/from-vulnerable-to-resilient-cutting-ransomware-risk-with-proactive-attack-surface-management Updated: 2026-08-05 Category: research --- ## Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions > Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/earth-estries Updated: 2026-08-14 Category: blog --- ## Gartner Peer Insights > The product gives a comprehensive insight into our business risks and ways to improve overall security. Support is a helpful contact and a non-nonsense approach. The interface is clear. The actions available to help improve overall security and security measures are easy to find and to activate. URL: https://www.trendaisecurity.com/en-us/customer-stories/gartner-peer-insights-healthcare-and-biotech-5989248 Updated: 2026-09-11 Category: customerStory --- ## Gartner Peer Insights - Government > We are a state government agency that is subject to oversight by the state. TrendAI Vision One™ has detected attempted attacks that the state SOC has missed, enabling us to swiftly halt these attacks and address the vulnerabilities before they escalate into more widespread problems. URL: https://www.trendaisecurity.com/en-us/customer-stories/gartner-peer-insights-government Updated: 2026-09-28 Category: customerStory --- ## Gartner Peer Insights Healthcare and Biotech 5989248 > It's a complete, powerful and comprehensive platform that delivers excellent protection against a wide range of threats. Its ease of use, strong threat detection capabilities, and centralized management make it a valuable asset for organizations, whatever their size. Along with their excellences in aftersales support. URL: https://www.trendaisecurity.com/en-us/customer-stories/gartner-peer-insights-healthcare-biotech-5989248 Updated: 2026-09-28 Category: customerStory --- ## Generative AI in Elections: Beyond Political Disruption > Elections are not just an opportunity for nation states to use Generative AI tools to damage a politician’s reputation. They are also an opportunity for cybercriminals to use Generative AI tools to orchestrate social engineering scams. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/generative-ai-in-elections-beyond-political-disruption Updated: 2026-10-01 Category: research --- ## Generic URL: https://www.trendaisecurity.com/en-us/customer-stories/generic Updated: 2026-05-27 Category: customerStory --- ## GitHub Action Runners: Analyzing the Environment and Security in Action > More organizations are applying a DevOps thought-process and methodology to optimize software development. One of the main tools used in this process is a continuous integration (CI) tool, which automates the integration of code changes from multiple developers working on the same project. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/github-action-runners-analyzing-the-environment-and-security-in-action Updated: 2026-10-07 Category: research --- ## Global Public Sector Under Siege: Threat Intelligence for Q2 2026 > In the second quarter of 2026, threats to the public sector have become increasingly persistent: from AI-generated ransomware, nation-state espionage, supply chain attacks, and many more, critical institutions face a rapidly growing range of risks. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/global-public-sector-under-siege-threat-intelligence-for-q2-2026 Updated: 2026-09-25 Category: blog --- ## Global Threat Research > Stay ahead of AI-powered attacks with TrendAI™ Research: real-time insight from 450+ researchers and the TrendAI™ Zero Day Initiative™ (ZDI). URL: https://www.trendaisecurity.com/en-us/threat-research Updated: 2026-10-16 Category: about --- ## Going Deeper: Exploring the Deep Web > An in-depth look into the duality of the Deep Web—how its anonymity allows free communication and the trade of illegal goods and services. See how it impacts the real world today, and how it could evolve over the next few years. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/exploring-the-deep-web Updated: 2026-08-06 Category: research --- ## Gone Phishing: How Phishing Leads to Hacked Accounts and Identity Theft > Phishing continues to be a popular method used by cybercriminals to trick users into giving out their personal information and credentials. Before you become a victim, learn about popular phishing techniques, and how to spot a phishing attempt. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/gone-phishing-how-phishing-leads-to-hacked-accounts-identity-theft Updated: 2026-08-16 Category: research --- ## Google, Mozilla Crack Down on Malicious Extensions and Add-ons > Google indefinitely suspends extensions that use the Chrome Web Store payments while Mozilla bans 197 add-ons in a quest to halt fraudulent activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/google-mozilla-crack-down-on-malicious-extensions-and-add-ons Updated: 2026-10-09 Category: research --- ## Google’s DoubleClick Abused to Deliver Miners > On January 24, 2018, we observed that the number of Coinhive web miner detections tripled due to a malvertising campaign. Attackers seem to have abused Google’s DoubleClick, which provides internet ad serving services, for traffic distribution. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/malvertising-campaign-abuses-googles-doubleclick-to-deliver-cryptocurrency-miners Updated: 2026-08-20 Category: blog --- ## Governing the Republic of AI Agents: The Framework Your AI Agents Already Need > AI agents have evolved from tools to autonomous participants in your organization, but governance has not kept pace. TrendAI™ proposes a six-pillar framework built to close that gap. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/governing-the-republic-of-ai-agents Updated: 2026-08-21 Category: research --- ## Government > AI-driven cybersecurity for federal, state, and local government. FedRAMP High authorized. FISMA, NIST, CMMC mapped. URL: https://www.trendaisecurity.com/en-us/solutions/government Updated: 2026-10-16 Category: solution --- ## Graybar Canada > We like having fewer dashboards and being able to see everything in one spot with a 10,000-foot overview as opposed to multiple screens. With [TrendAI Vision One™], everything is right there. URL: https://www.trendaisecurity.com/en-us/customer-stories/graybar-canada Updated: 2026-09-11 Category: customerStory --- ## Group Behind TrickBot Spreads Fileless BazarBackdoor > A campaign propagates a new malware named ‘BazarBackdoor’, a fileless backdoor reportedly created by the same threat actors behind TrickBot. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/group-behind-trickbot-spreads-fileless-bazarbackdoor Updated: 2026-08-14 Category: research --- ## Guarding AI Models From Malicious Alterations in the AI PC Era > This article discusses the importance of properly identifying and protecting AI model files and their associated assets, such as labels, from malicious or even unintended tampering. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/guarding-ai-models-from-malicious-alterations-in-the-ai-pc-era Updated: 2026-09-28 Category: research --- ## Guarding LLMs With a Layered Prompt Injection Representation > TrendAI™ Research has developed a model training procedure for learning an essential representation of prompt injection attacks. The resulting prompt representation exhibits approximately linear separability, allowing the specialized, small-scale classifier trained on features derived from the representation to achieve high classification performance. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/guarding-llms-with-a-layered-prompt-injection-representation Updated: 2026-08-05 Category: research --- ## Guidance on Kubernetes Threat Modeling > We provide recommendations for cloud admins on how to formulate a security strategy when using Kubernetes for container orchestration. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/guidance-on-kubernetes-threat-modeling Updated: 2026-08-12 Category: research --- ## Hacker Infrastructure and Underground Hosting 101:Where Are Cybercriminal Platforms Offered? > Underground platforms are part of a mature ecosystem for trading cybercrime goods and services. How does a capable hosting infrastructure allow illicit activities to thrive? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/hacker-infrastructure-and-underground-hosting-101-where-are-cybercriminal-platforms-offered Updated: 2026-08-05 Category: research --- ## Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices > A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/hacker-publishes-credentials-for-over-515-000-servers-routers-and-iot-devices Updated: 2026-10-09 Category: research --- ## Hacking Tools, Survey Scam Target Facebook Users URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/hacking-tools-survey-scam-using-sopa-target-facebook-users Updated: 2026-08-12 Category: blog --- ## Healthcare > TrendAI™ secures EHRs, medical devices, and patient data with healthcare cybersecurity built for HIPAA, HITECH, and HITRUST, cutting unresolved vulnerabilities by 40%. URL: https://www.trendaisecurity.com/en-us/solutions/healthcare Updated: 2026-10-16 Category: solution --- ## Hidden Scams in Malicious Scans: How to Use QR Codes Safely > The popularity of QR codes has created fertile ground for malicous actors to spruce up their malware tool kit for scams that steal not only personal information but also hard-earned assets that are impossible to recover once lost. We take a closer look at the different QR code-related scams and provide helpful tips on how to use QR codes safely. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/hidden-scams-in-malicious-scans-how-to-use-qr-codes-safely Updated: 2026-08-14 Category: research --- ## Homepage > With proactive security that eliminates risk, defeats threats, and inspires innovation. URL: https://www.trendaisecurity.com/en-us/ Updated: 2026-10-16 Category: home --- ## How AI-Native Development Platforms Enable Fake Captcha Pages > Cybercriminals are abusing AI-native platforms like Vercel, Netlify, and Lovable to host fake captcha pages that deceive users, bypass detection, and drive phishing campaigns. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/ai-development-platforms-enable-fake-captcha-pages Updated: 2026-09-30 Category: blog --- ## How AiTM Phishing Bypassed MFA to Hijack a Microsoft 365 Mailbox in BEC Scheme > One click on a targeted lure handed an attacker live Microsoft 365 session tokens, enough to impersonate a vendor and reroute payments. TrendAI Vision One™ Services – Managed Detection and Response (MDR) tracks the attack to its root cause. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/how-aitm-phishing-bypassed-mfa-to-hijack-a-microsoft-365-mailbox-in-bec-scheme Updated: 2026-09-15 Category: blog --- ## How BPF-Enabled Malware Works: Bracing for Emerging Threats > We discuss proof-of-concept rootkits and malware used by cybercriminals in conjunction with Berkeley Packet Filtering (BPF), a piece of technology that allows programs to execute code in the operating systems of popular cloud-computing platforms. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-bpf-enabled-malware-works-bracing-for-emerging-threats Updated: 2026-08-14 Category: research --- ## How Cybercriminals Abuse Cloud Tunneling Services > Our research examines how cloud tunneling services work and how organizations can thwart threats that abuse them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-cybercriminals-abuse-cloud-tunneling-services Updated: 2026-08-21 Category: research --- ## How Cybercriminals Can Perform Virtual Kidnapping Scams Using AI Voice Cloning Tools and ChatGPT > This article gives an overview of the elements of virtual kidnapping and how malicious actors use social engineering tactics and abuse AI voice cloning tools and ChatGPT to launch these attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-cybercriminals-can-perform-virtual-kidnapping-scams-using-ai-voice-cloning-tools-and-chatgpt Updated: 2026-08-05 Category: research --- ## How Digital Assistants Change Social Engineering > Digital assistants are becoming trusted, capable intermediaries, which inadvertently makes them a powerful new vector for social engineering. This article examines how attackers could exploit an assistant’s knowledge, influence, and ability to act on a user’s behalf. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-digital-assistants-change-social-engineering Updated: 2026-10-14 Category: research --- ## How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse > This article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-residential-proxies-and-captcha-solving-services-become-agents-of-abuse Updated: 2026-08-07 Category: research --- ## How TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow > TrendAI™ Research uncovered an open redirect in Dify's post-login flow that could have handed a freshly authenticated session, token and all, to an attacker, and worked with the vendor to close it across every sign-in path before the details went public. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/how-trendai-research-helped-close-an-open-redirect-in-difys-post-login-flow Updated: 2026-09-15 Category: blog --- ## How Unmanaged AI Adoption Puts Your Enterprise at Risk > We challenge assumptions about AI models by revealing real-world biases and limitations, and the impact of poorly managed AI adoptions. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-unmanaged-ai-adoption-puts-enterprises-at-risk Updated: 2026-08-05 Category: research --- ## How to Secure Smart Home IoT Devices, Routers, and Smart Speakers > Smart TVs, smart refrigerators, smart cameras, and other smart devices make life at home convenient, but if left unguarded, they can inadvertently expose homes to risks. This infographic shows basic recommendations for securing these devices. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-to-secure-smart-home-iot-devices-routers-and-smart-speakers Updated: 2026-09-28 Category: research --- ## How to Secure Video Conferencing Apps > Video conferencing apps provide many benefits, but they also present organizations with the challenge of ensuring that their employees — and the data they work with — remain secure when using these apps. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/how-to-secure-video-conferencing-apps Updated: 2026-10-07 Category: research --- ## Hunt Them All: An AI-Powered Vulnerability Sweep of 19,000 MCP Servers > In this research, we analyzed over 19,000 open-source MCP server repositories to uncover how much AI-generated code they contain and how many harbor exploitable vulnerabilities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/hunt-them-all-an-ai-powered-vulnerability-sweep-of-19-000-mcp-servers Updated: 2026-08-11 Category: research --- ## Hype vs. Reality: AI in the Cybercriminal Underground > This report discusses the state of generative artificial intelligence (AI) in the cybercriminal underground: how cybercriminals are using ChatGPT, how they're adding ChatGPT features to their criminal products, and how they’re trying to remove censorship to ask ChatGPT anything. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/hype-vs-reality-ai-in-the-cybercriminal-underground Updated: 2026-08-05 Category: research --- ## IBM URL: https://www.trendaisecurity.com/en-us/customer-stories/ibm Updated: 2026-07-10 Category: customerStory --- ## IPFS: A New Data Frontier or a New Cybercriminal Hideout? > In this article, we briefly detail what IPFS is and how it works at the user level, before providing up to date statistics about the current usage of IPFS by cybercriminals, especially for hosting phishing content. We will also discuss emerging new cybercrime activities abusing the IPFS protocol and detail how cybercriminals already consider IPFS for their deeds. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ipfs-a-new-data-frontier-or-a-new-cybercriminal-hideout Updated: 2026-08-11 Category: research --- ## ISO/SAE 21434: Securing Tomorrow's Connected Cars > The upcoming standard sets the tone for future mandates on the cybersecurity of connected cars. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/iso-sae-21434-securing-tomorrows-connected-cars Updated: 2026-10-08 Category: research --- ## Identifying Weak Parts of a Supply Chain > Malicious attacks have consistently been launched on weak points in the supply chain. Like all attacks, these will evolve into more advanced forms. Software development, with multiple phases that could be placed at risk, is particularly vulnerable. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/identifying-weak-parts-of-a-supply-chain Updated: 2026-10-07 Category: research --- ## Identity Security > Reduce the chances of corporate identity theft with TrendAI Vision One™ Identity Security. URL: https://www.trendaisecurity.com/en-us/platform/identity-security Updated: 2026-07-31 Category: platform --- ## In Transit, Interconnected, at Risk: Cybersecurity Risks of Connected Cars > The use of connected cars continues to grow. While the vehicles’ link to technologies such as 5G and the cloud present opportunities for improving efficiency and safety, it can also attract risks from threat actors as well. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/in-transit-interconnected-at-risk-cybersecurity-risks-of-connected-cars Updated: 2026-08-07 Category: research --- ## Incident Response > Accelerate threat detection, investigation, and response with TrendAI Vision One™ Services – Incident Response. Recover faster and strengthen your security. URL: https://www.trendaisecurity.com/en-us/services/incident-response Updated: 2026-10-16 Category: services --- ## Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics > In this blog entry, Trend™ Research analyses the layered command-and-control approaches that Lumma Stealer uses to maintain its ongoing operations while enhancing collection of victim-environment data. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/lumma-stealer-browser-fingerprinting Updated: 2026-09-30 Category: blog --- ## Industrial and Energy > TrendAI™ delivers AI cybersecurity for industrial and energy, protecting ICS, SCADA, and OT assets with virtual patching and IT/OT visibility. URL: https://www.trendaisecurity.com/en-us/solutions/industrial-manufacturing Updated: 2026-10-16 Category: solution --- ## Influential Facebook Brand Pages Stolen via Credential Phishing > We found some fake Facebook accounts stolen from influential accounts to sell, change the details, and/or reused for phishing. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/influential-facebook-brand-pages-stolen-via-credential-phishing Updated: 2026-10-08 Category: research --- ## InfoSec Guide: Domain Monitoring — Detecting Phishing Attacks (Part 1) > A lot of best practices teach users how to prevent or defend against phishing attacks, but how can organizations actively detect and thwart them before users even see them? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/infosec-guide-domain-monitoring-detecting-phishing-attacks Updated: 2026-08-05 Category: research --- ## Infrastructure as Code: Security Risks and How to Avoid Them > Infrastructure as Code (IaC) is a key DevOps practice that bolsters agile software development. In this report, we identify security risk areas in IaC implementations and the best practices in securing them in hybrid cloud environments. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/infrastructure-as-code-security-risks-and-how-to-avoid-them Updated: 2026-08-25 Category: research --- ## Inside SHADOW-WATER-084: A Steganographic Loader-as-a-Service Delivering Remcos, LXBASE, and More > TrendAI™ Research tracked three campaigns that ship completely different decoy applications and unrelated payloads, all riding one shared toolkit. This analysis covers the full chain, from the pixel data that hides the first stage, through a flexible shared loader to deliver multiple payloads, revealing how adversaries are standardizing their delivery mechanisms. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/inside-shadow-water-084-a-steganographic-loader-as-a-service-delivering-remcos-lxbase-and-more Updated: 2026-09-01 Category: blog --- ## Inside the Bulletproof Hosting Business: Cybercriminal Methods and OpSec > Bulletproof hosting (BPH) services have long been crucial parts of the cybercriminal infrastructure. How do they protect malicious activities, and how do cybercriminals use them to stay in business? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/inside-the-bulletproof-hosting-business-cybercrime-methods-opsec Updated: 2026-08-05 Category: research --- ## Inside the Halls of a Cybercrime Business > We explore three differently sized criminal groups to determine how they compare to similarly sized legitimate businesses in terms of how they are organized. We also discuss the advantages of knowing the size of a target criminal organization for cybercrime investigators. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/inside-the-halls-of-a-cybercrime-business Updated: 2026-08-05 Category: research --- ## Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It > OpenAI’s own models broke out of a test sandbox and into Hugging Face’s servers to solve an evaluation, with no human attacker involved. The incident showed how keeping agentic AI safe now depends on how it’s contained, not just on how it’s trained. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/inside-the-openai-hugging-face-incident Updated: 2026-09-15 Category: blog --- ## Inside the Smart Home: IoT Device Threats and Attack Scenarios > The different threat scenarios that can happen to a smart home illustrate that compromised IoT devices can affect not just users' comfort and convenience but also their safety. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/inside-the-smart-home-iot-device-threats-and-attack-scenarios Updated: 2026-08-05 Category: research --- ## Insurability URL: https://www.trendaisecurity.com/en-us/solutions/insurability Updated: 2026-10-16 Category: solution --- ## Introducing the TrendAI Vision One™ SDK: Build Integrations That Scale > The security ecosystem runs on integration. Threat intelligence, identity context, asset risk, endpoint telemetry: the value of those signals multiplies when they connect. The work of making them connect has, for too long, slowed teams down and limited visibility across the stack. At TrendAI™, we're changing that. Here's what we've built, where we’re going with it, and what it means for the partners and developers who build on our platform. URL: https://www.trendaisecurity.com/en-us/news/introducing-trendai-vision-one-sdk-build-integrations-that-scale Updated: 2026-09-28 Category: news --- ## Introducing the TrendAI™ Agentic Exploit-Remediation Engine: Finding Zero-Day Vulnerabilities at the Speed of AI > The TrendAI™ agentic exploit-remediation engine, code name AESIR, combines AI automation with expert oversight to discover zero-day vulnerabilities in AI infrastructure – 21 CVEs across NVIDIA, Tencent, and MLflow since mid-2025. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/aesir Updated: 2026-09-11 Category: blog --- ## Invasive Ads: The Unconventional Cyber Surveillance Attack Surface > TrendAI™ Research analyzed the activities of SHADOW-EARTH-79, an entity abusing the real-time ad-tech bidding process to track and profile individuals in conflict zones, sanctioned states, and other sensitive locations worldwide. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/invasive-ads-the-unconventional-cyber-surveillance-attack-surface Updated: 2026-10-16 Category: research --- ## Investigating the Emerging Access-as-a-Service Market > We examine an emerging business model that involves access brokers selling direct access to organizations and stolen credentials to other malicious actors. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/investigating-the-emerging-access-as-a-service-market Updated: 2026-08-06 Category: research --- ## Investigation into a Nefilim Attack Shows Signs of Lateral Movement, Possible Data Exfiltration > Trend Micro’s Managed XDR (MxDR) and Incident Response (IR) teams recently investigated an incident involving a company that was hit by the Nefilim ransomware. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/investigation-into-a-nefilim-attack-shows-signs-of-lateral-movement-possible-data-exfiltration Updated: 2026-10-07 Category: research --- ## Invisible Prompt Injection: A Threat to AI Security > Learn about invisible prompt injection, which is a silent threat to secure AI. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/invisible-prompt-injection-secure-ai Updated: 2026-08-20 Category: blog --- ## IoT Security Issues, Threats, and Defenses > As the IoT continues to influence more environments and settings, we review what IoT security is and why it remains essential today. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/iot-security-101-threats-issues-and-defenses Updated: 2026-08-14 Category: research --- ## IoT and Ransomware: A Recipe for Disruption > Ransomware can impact industrial operations in the bid to cause disruptions. Organizations need to reevaluate the security of their IoT environments in the face of such a threat. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/iot-and-ransomware-a-recipe-for-disruption Updated: 2026-08-25 Category: research --- ## Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting > We detail the update that advanced persistent threat (APT) group Iron Tiger made on the custom malware family SysUpdate. In this version, we also found components that enable the malware to compromise Linux systems. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/iron-tiger-sysupdate-adds-linux-targeting Updated: 2026-10-12 Category: blog --- ## Islands of Telecom: Risks in IT > Using an island resort analogy, we detail sample scenarios and potential risks of telecommunications IT for organizations and telecommunications companies, along with our recommendations. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/islands-of-telecom-risks-in-it Updated: 2026-10-16 Category: research --- ## It’s By Design: The Use-After-Free of Azure Cloud > Persistent DNS references to deleted Azure resources create opportunities for attackers to take over trusted endpoints, highlighting a critical risk in cloud infrastructure. TrendAI™ Research discusses six real-world scenarios where attackers could exploit lingering DNS names, allowing them to inherit trust and compromise dependent systems. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/its-by-design-the-use-after-free-of-azure-cloud Updated: 2026-08-18 Category: research --- ## Japan Cyber Resilience Initiative > TrendAI™ is committing up to ¥10 billion in TrendAI Vision One™ Flex credits and 100 forward-deployed engineers to help Japanese organizations. URL: https://www.trendaisecurity.com/en-us/campaigns/japan-cyber-resilience-initiative Updated: 2026-10-17 Category: campaign --- ## KOVTER: An Evolving Malware Gone Fileless > KOVTER is one example of a constantly evolving malware. Initially starting out as a police ransomware, it eventually evolved into a much more effective and evasive fileless malware. Here is a closer look at KOVTER, and how organizations can lessen its impact. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/kovter-an-evolving-malware-gone-fileless Updated: 2026-08-05 Category: research --- ## Karsan > 95% of phishing emails were blocked before reaching users, and concerns about user performance ceased entirely. URL: https://www.trendaisecurity.com/en-us/customer-stories/karsan Updated: 2026-09-11 Category: customerStory --- ## Keeping Cyber Risk Under Control: Spotting and Thwarting ICS Threats > Industrial control systems (ICSs) are integral to smart factories, but gaps in the security of these systems could be exploited by malicious actors for cyberattacks. Enterprises should therefore address weak links in ICSs in their cybersecurity strategy. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/keeping-cyber-risk-under-control-spotting-and-thwarting-ics-threats Updated: 2026-09-28 Category: research --- ## Keeping a Close Watch: Trend Micro Specialized Cybersecurity Report for Latin America and the Caribbean > In collaboration with the Cybersecurity Program of OAS/CICTE, we examine the cybersecurity challenges affecting member states of the OAS. These issues include ransomware and active attacks, threats related to remote work, and the risks brought about by the adoption of new technologies. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/trend-micro-specialized-cybersecurity-report-for-latin-america-and-the-caribbean Updated: 2026-10-05 Category: research --- ## Keller ISD > With TrendAI™, we reduced our threat detection time from 3-4 hours to 10 minutes, making our team more efficient. 50% of security tasks are now automated. URL: https://www.trendaisecurity.com/en-us/customer-stories/keller-isd Updated: 2026-09-28 Category: customerStory --- ## Know the Symptoms: Protect Your Devices While Working From Home > Is your work-from-home set up secure? Here are a few signs to know if your devices have been hacked or infected with malware. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/know-the-symptoms-protect-your-devices-while-working-from-home Updated: 2026-10-16 Category: research --- ## Kong API Gateway Misconfigurations: An API Gateway Security Case Study > Tools that aggregate access into multiple different environments, such as API gateways, pose a security risk for all these environments upon breach. In this article, we continue our journey through the security issues of the API Gateway landscape. Our new research focuses on another popular API gateway — Kong. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/kong-api-gateway-misconfigurations-an-api-gateway-security-case-study Updated: 2026-08-21 Category: research --- ## Kyndryl URL: https://www.trendaisecurity.com/en-us/customer-stories/kyndryl Updated: 2026-07-10 Category: customerStory --- ## LIC Mutual Fund > [TrendAI™] commitment to innovation and our shared vision for proactive cybersecurity creates a strong foundation for anticipating risks and responding effectively to emerging threats. URL: https://www.trendaisecurity.com/en-us/customer-stories/lic-mutual-fund Updated: 2026-09-11 Category: customerStory --- ## LLM as a Judge: Evaluating Accuracy in LLM Security Scans > As large language models (LLMs) become more capable and widely adopted, the risk of unintended or adversarial outputs grows, especially within a security-sensitive context. To identify and mitigate such risks, Trend Micro researchers ran LLM security scans that simulate adversarial attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/llm-as-a-judge-evaluating-accuracy-in-llm-security-scans Updated: 2026-08-05 Category: research --- ## Leaked Today, Exploited for Life: How Social Media Biometric Patterns Affect Your Future > The photos, videos, and audio posts we put online expose sensitive biometric patterns that can be abused by cybercriminals. These patterns are virtually unchangeable and can be used now or in future attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/leaked-today-exploited-for-life-how-social-media-biometric-patterns-affect-your-future Updated: 2026-08-06 Category: research --- ## Leaky Labels: Bypassing Traefik Proxy Leveraging cAdvisor Metrics > While examining the exposed information in the metrics endpoint of cAdvisor, we noticed that it exposes container labels for all the running containers on the “/metrics” endpoint. Container labels are key value pairs that are stored as a string. They are used to store metadata such as licensing information, maintainer information, versioning about container objects such as container images, running containers, volumes, daemons, and networks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/leaky-labels-bypassing-traefik-proxy-leveraging-cadvisor-metrics Updated: 2026-09-28 Category: research --- ## Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails > We have come across a PowerShell script (mailer script) that distributes the Lemon Duck cryptominer through a new propagation method: Covid-19-themed emails with weaponized attachments. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/lemon-duck-cryptominer-spreads-through-covid-19-themed-emails Updated: 2026-08-28 Category: research --- ## Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices > An overview of the Lemon Group’s use of preinfected mobile devices, and how this scheme is potentially being developed and expanded to other internet of things (IoT) devices. This research was presented in full at the Black Hat Asia 2023 Conference in Singapore in May 2023. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/lemon-group-cybercriminal-businesses-built-on-preinfected-devices Updated: 2026-09-11 Category: blog --- ## Lessons in Resilience from the Race to Patch SharePoint Vulnerabilities > In this article, Trend Micro discusses how the fast-moving attacks using CVE-2025-53770 and CVE-2025-53771 have underscored the essential role of virtual patching and reliable intelligence in protecting organizations against evolving threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/lessons-in-resilience-from-the-race-to-patch-sharepoint-vulnerabilities Updated: 2026-09-01 Category: blog --- ## Linux Threat Report 2021 1H: Linux Threats in the Cloud and Security Recommendations > Linux powers many cloud infrastructures today. However, it is not immune to threats and risks. We discuss several pressing security issues including malware and vulnerabilities that compromise Linux systems in the first half of 2021. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/linux-threat-report-2021-1h-linux-threats-in-the-cloud-and-security-recommendations Updated: 2026-10-08 Category: research --- ## Living Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains > In this blog entry, researchers at TrendAI Vision One™ Services – Managed Detection and Response (MDR) walk through how attackers deliver, install, and operate a reconfigured ScreenConnect client, and why it slips past defenses built to catch conventional malware. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/screenconnect-abuse Updated: 2026-08-24 Category: blog --- ## LockBit and Black Basta Are the Most Active RaaS Groups as Victim Count Rises: Ransomware in Q2 and Q3 2022 > We discuss key trends in the ransomware threat landscape from April to September 2022. Data from RaaS and extortion groups’ leak sites, open-source intelligence (OSINT) research, and the Trend Micro™ Smart Protection Network™ points to LockBit, BlackCat, Black Basta, and Karakurt as the most active groups with the most victims. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/lockbit-and-black-basta-are-the-most-active-raas-groups-as-victim-count-rises-ransomware-in-q2-and-q3-2022 Updated: 2026-09-17 Category: research --- ## LockBit, BlackCat, and Clop Prevail as Top RAAS Groups: Ransomware in 1H 2023 > We delve into three of the most active ransomware families that dominated the first half of 2023: LockBit, Clop, and BlackCat. This report features data from ransomware-as-a-service (RaaS) and extortion groups’ leak sites, Trend Micro’s open-source intelligence (OSINT) research, and the Trend Micro™ Smart Protection Network™, collected from Jan. 1 to June 30, 2023. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/lockbit-blackcat-and-clop-prevail-as-top-raas-groups-for-1h-2023 Updated: 2026-09-17 Category: research --- ## LockBit, BlackCat, and Royal Dominate the Ransomware Scene: Ransomware in Q4 2022 > We discuss the essential features of the ransomware threat landscape in the fourth quarter of 2022. Our data reveals a key pattern throughout 2022: Established ransomware groups preferred to target small and midsize organizations in North America and Europe. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/lockbit-blackcat-and-royal-dominate-the-ransomware-scene-ransomware-in-q4-2022 Updated: 2026-10-01 Category: research --- ## LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022 > This report delves into the ransomware threat landscape of the first quarter of 2022, with a focus on the three most successful ransomware families and the types of industries and organizations that were affected by their attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/lockbit-conti-and-blackcat-lead-pack-amid-rise-in-active-raas-and-extortion-groups-ransomware-in-q1-2022 Updated: 2026-10-05 Category: research --- ## Locked, Loaded, and in the Wrong Hands: Legitimate Tools Weaponized for Ransomware in 2021 > These tools were intended for use in security research and other authorized purposes. However, cybercriminals have found a way to exploit them for ransomware campaigns. What are some of these tools and how exactly are they weaponized? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/locked-loaded-and-in-the-wrong-hands-legitimate-tools-weaponized-for-ransomware-in-2021 Updated: 2026-08-05 Category: research --- ## Loki Delivered as CAB File Attachment > A variant of Loki info stealer that we detected through our honeypot is propagated as Windows CAB file email attachments. It uses process hollowing to evade detection. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/loki-delivered-as-cab-file-attachment Updated: 2026-10-16 Category: research --- ## Loki Info Stealer Propagates through LZH Files > We recently acquired a spam sample that propagates the Loki infostealer through LZH compressed archive files. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/loki-info-stealer-propagates-through-lzh-files Updated: 2026-08-25 Category: research --- ## Looking Into the Void: Probing a Top Bulletproof Hosting Service > Cybercriminal groups cannot operate independently. To keep their operations up and running, they need specific services provided by third parties. We investigate one such business that has been integral to the activities of a number of high-profile gangs. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/looking-into-the-void-probing-a-top-bulletproof-hosting-service Updated: 2026-10-01 Category: research --- ## Lost in Translation: When Industrial Protocol Translation goes Wrong > This research paper looks at protocol gateways, which translate various protocols used by different industrial devices and machinery, and provides insight into the security issues and vulnerabilities found in these devices as well as ways to secure them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/lost-in-translation-when-industrial-protocol-translation-goes-wrong Updated: 2026-08-25 Category: research --- ## MCP Security: Network-Exposed Servers Are Backdoors to Your Private Data > Exposed MCP servers pose a risk for organizations utilizing them. Our research examined the types of concerns that emerge and how to keep systems safe through immediate and extended measures. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mcp-security-network-exposed-servers-are-backdoors-to-your-private-data Updated: 2026-08-21 Category: research --- ## MEDCAN URL: https://www.trendaisecurity.com/en-us/customer-stories/medcan Updated: 2026-07-10 Category: customerStory --- ## MQTT and CoAP: Security and Privacy Issues in IoT and IIoT Communication Protocols > We looked into MQTT brokers and CoAP servers around the world to assess IoT protocol security. Learn how to prevent risks and secure machine-to-machine (M2M) communications over MQTT and CoAP in our research. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mqtt-and-coap-security-and-privacy-issues-in-iot-and-iiot-communication-protocols Updated: 2026-08-05 Category: research --- ## MQTT and M2M: Do You Know Who Owns Your Machine’s Data? > In our research, we demonstrate how easy it is to discover insecure deployments of MQTT, how to identify customers of these insecure deployments, what data is being transmitted, and explore how an attacker can potentially misuse the data or abuse the insecurity of MQTT brokers. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mqtt-and-m2m-do-you-know-who-owns-your-machine-s-data Updated: 2026-08-10 Category: research --- ## Malicious Actors Target Comm Apps such as Zoom, Slack, Discord > Communication apps have caught the eye of malicious actors who are always looking to integrate new techniques in their malicious activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/malicious-actors-target-comm-apps-such-as-zoom-slack-discord Updated: 2026-10-02 Category: research --- ## Malicious Chrome Extensions, Domains Used to Steal User Data > Browser extensions and malicious domains were used in a campaign that aims to track user activity and data. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/chrome-extensions-malicious-domains-used-to-steal-user-data Updated: 2026-10-09 Category: research --- ## Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know > Disruption reported across at least seven states, from equipment left accessible online. The issue is largely a matter of configuration and access control, and here's what to fix first. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/us-water-utilities-under-attack-what-operators-need-to-know Updated: 2026-08-07 Category: blog --- ## Malicious Docker Hub Container Images Used for Cryptocurrency Mining > In our monitoring of Docker-related threats, we came across a threat actor who uploaded malicious images to Docker Hub for cryptocurrency mining. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/malicious-docker-hub-container-images-cryptocurrency-mining Updated: 2026-08-14 Category: research --- ## Malicious Domains and Files Related to Zoom Increase, ‘Zoom Bombing’ on the Rise > Users of video conferencing app Zoom have been targeted using suspicious domains, malicious files, and ‘Zoom bombing’ as threat actors take advantage of work-from-home arrangements brought about by COVID-19. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/malicious-domains-and-files-related-to-zoom-increase-zoom-bombing-on-the-rise Updated: 2026-10-07 Category: research --- ## Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer > Malicious OpenClaw skills trick AI agents and users into installing a new AMOS variant that steals extensive data at scale. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/malicious-openclaw-skills-used-to-distribute-atomic-macos-stealer Updated: 2026-09-11 Category: blog --- ## Malicious Script Plagues Over 2,000 WordPress Accounts, Redirects Visitors to Scam Sites > Over 2,000 WordPress sites were compromised by a malicious script that redirects visitors to scam sites, gains admin access, and installs fake plugins. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/malicious-script-plagues-over-2-000-wordpress-accounts-redirects-visitors-to-scam-sites Updated: 2026-08-05 Category: research --- ## Malicious Spam Campaign Targets South Korean Users > Trend Micro researchers detect a spam campaign targeting South Korea. Cybercriminals send out emails written as a notice from the Korean Fair Trade Commission. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/malicious-spam-campaign-targets-south-korean-users Updated: 2026-10-09 Category: research --- ## Malvertising: When Online Ads Attack > Cybercriminals are increasingly using malicious advertisements as a platform for spreading malware. Find out how they work how you can protect yourself from these online threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/malvertising-when-online-ads-attack Updated: 2026-08-06 Category: research --- ## Manufacturing Company > They've introduced a credit system… unused credits don’t go to waste. We can divert some to a sandbox or other service... URL: https://www.trendaisecurity.com/en-us/customer-stories/manufacturing-company-network-security-administrator-peerstory Updated: 2026-07-10 Category: customerStory --- ## Mapping the Criminal Economy Targeting Critical Infrastructure > TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mapping-the-criminal-economy-targeting-critical-infrastructure Updated: 2026-09-03 Category: research --- ## Max Matthiessen URL: https://www.trendaisecurity.com/en-us/customer-stories/max-matthiessen Updated: 2026-07-10 Category: customerStory --- ## Maze Ransomware Attacks US IT Firm > Maze ransomware, notorious for not just encrypting but for stealing victims’ data, attacks a US IT firm. The company sent emails to customers which include IP addresses and file hashes that have been linked to previous Maze attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/maze-ransomware-attacks-us-it-firm Updated: 2026-10-09 Category: research --- ## McLaren Formula 1 > Learn about how Trend Micro is in partnership with McLaren Formula 1 to reach innovation faster. URL: https://www.trendaisecurity.com/en-us/campaigns/formula-1 Updated: 2026-07-31 Category: campaign --- ## Metaverse or Metaworse? How the Apple Vision Pro Stacks Up Against Predictions > In 2022, Trend Micro conducted extensive research to understand potential cyber threats to the metaverse amid significant global changes and a growing focus on AI technologies. The release of Apple's Apple Vision Pro headset a year later provided an opportunity to evaluate these predictions, highlighting both advancements and persistent challenges in areas such as data privacy, biometric security, and multi-vendor interoperability. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/metaverse-or-metaworse-how-the-apple-vision-pro-stacks-up-against-predictions Updated: 2026-10-01 Category: research --- ## Metaworse? The Trouble with the Metaverse > Innovators are diving into a new and immersive virtual space, but with new technology comes new threats. We bring forward possible problematic issues that metaverse pioneers should be wary of. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/metaworse-the-trouble-with-the-metaverse Updated: 2026-08-05 Category: research --- ## Microsoft Alerts Users About Critical Font-related Remote Code Execution Vulnerability in Windows > An RCE vulnerability affecting Windows have been discovered, with Microsoft rating its severity as critical. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/microsoft-alerts-users-about-critical-font-related-remote-code-execution-vulnerability-in-windows Updated: 2026-10-07 Category: research --- ## Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided > On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/microsoft-releases-advisory-on-zero-day-vulnerability-cve-2020-0674-workaround-provided Updated: 2026-10-09 Category: research --- ## Millions of IoT Devices Affected by Ripple20 Vulnerabilities > The internet of things (IoT) landscape will be critically affected by the recently discovered Ripple20 vulnerabilities. This group of 19 bugs could potentially hit millions of IoT devices across many different industries. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/millions-of-iot-devices-affected-by-ripple20-vulnerabilities Updated: 2026-08-28 Category: research --- ## Minding the Gaps: The State of Vulnerabilities in Cloud Native Applications > Our new report maps the vulnerable cracks in cloud native application security, and shows how this is a growing concern that enterprises should devote time and resources to secure. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/minding-the-gaps-the-state-of-vulnerabilities-in-cloud-native-applications Updated: 2026-09-28 Category: research --- ## Mining Through Mountains of Information and Risk: Containers and Exposed Container Registries > In this entry, we continue delving into an investigation of exposed registries and look at the types of files and information that malicious actors can access and compromise from these. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mining-through-mountains-of-information-and-risk-containers-and-exposed-container-registries Updated: 2026-09-16 Category: research --- ## Mirai Updates: New Variant Mukashi Targets NAS Devices, New Vulnerability Exploited in GPON Routers, UPX-Packed FBot > Notorious IoT malware Mirai has seen a recent increase in updates as a new variant emerges and a new vulnerability is targeted. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mirai-updates-new-variant-mukashi-targets-nas-devices-new-vulnerability-exploited-in-gpon-routers-upx-packed-fbot Updated: 2026-10-08 Category: research --- ## Misconfigured AWS S3 Bucket Leaks 36,000 Inmate Records > Over 30K records of US inmates were inadvertently exposed through a leaky AWS S3 cloud storage bucket. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/misconfigured-aws-s3-bucket-leaks-36-000-inmate-records Updated: 2026-08-18 Category: research --- ## Misconfigured Docker Daemon API Ports Attacked for Kinsing Malware Campaign > A campaign targeted misconfigured Docker Daemon API ports through Kinsing malware. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/misconfigured-docker-daemon-api-ports-attacked-for-kinsing-malware-campaign Updated: 2026-10-07 Category: research --- ## Mispadu Banking Trojan Resurfaces > Recent spam campaigns leading to URSA/Mispadu has been uncovered. This attack targets systems with Spanish and Portuguese as system languages. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mispadu-banking-trojan-resurfaces Updated: 2026-10-02 Category: research --- ## Mitigating the Threat of Sidecar Container Injection > Although a legitimate approach, sidecar containers can add even more complexity to Kubernetes (K8s) clusters, not only making it harder to manage but also to detect compromises. This article demonstrates that attackers can leverage the sidecar injection technique after compromising a K8s cluster to remain stealthy and avoid detection, and how to protect K8s clusters from this malicious activity. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mitigating-the-threat-of-sidecar-container-injection Updated: 2026-10-01 Category: research --- ## Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts > An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/mobile-banking-trojan-faketoken-resurfaces-sends-offensive-messages-overseas-from-victims-accounts Updated: 2026-08-28 Category: research --- ## Modern Bank Heists 2026: The Machine-Speed War for Financial Control > How agentic AI, nation-state actors, and cybercrime-as-a-service are outpacing financial sector defenses, and how defenders can respond at machine speed URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/modern-bank-heists-2026-the-machine-speed-war-for-financial-control Updated: 2026-08-07 Category: research --- ## Modern Ransomware Shakes Up Banking, Government, Transportation Sectors in 1H 2021 > Read about the impact of ransomware to critical industries in 1H, how modern ransomware operators gain initial access to organizations, and what decision-makers can do to defend against this menacing threat. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/modern-ransomware-shake-up-banking-government-transportation-sectors-in-1h-2021 Updated: 2026-09-28 Category: research --- ## Modern Ransomware's Double Extortion Tactics and How to Protect Enterprises Against Them > Modern ransomware like Nefilim present new challenges and security concerns for enterprises across the world. How do these new families differ from traditional ransomware? And what can organizations do to mitigate risks? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/modern-ransomwares-double-extortion-tactics-and-how-to-protect-enterprises-against-them Updated: 2026-08-05 Category: research --- ## Navigating Gray Clouds: The Importance of Visibility in Cloud Security > The big move to the cloud has already happened for majority of enterprises and organizations who are invested in providing unhampered, future-proof services. But how can they prioritize visibility in a cloud-first world? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/navigating-gray-clouds-the-importance-of-visibility-in-cloud-security Updated: 2026-10-02 Category: research --- ## Navigating Risk Management: How Red Teaming Can Prepare Your Team for Actual Cyber Attacks > This article dives into the practice of “red teaming“. Red team exercises give enterprises valuable insights into their security posture, and promote a culture of continuous improvement. It has become an integral part of global risk management. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/navigating-risk-management-how-red-teaming-can-prepare-your-team-for-actual-cyber-attacks Updated: 2026-10-12 Category: research --- ## Navigating the Threat Landscape for Cloud-Based GPUs > The increased adoption of technologies like artificial intelligence (AI), machine learning (ML), large language models (LLMs), and high-performance computing (HPC) underscores the growing need to prioritize the security of graphics processing units (GPUs). URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/navigating-the-threat-landscape-for-cloud-based-gpus Updated: 2026-09-28 Category: research --- ## Nefilim Ransomware Threatens to Expose Stolen Data > New ransomware variant Nefilim is distributed through exposed Remote Desktop Protocol (RDP) and threatens to release stolen data to the public. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/nefilim-ransomware-threatens-to-expose-stolen-data Updated: 2026-08-09 Category: research --- ## Negasteal Uses Hastebin for Fileless Delivery of Crysis Ransomware > We discovered a Negasteal variant that uses hastebin to filelessly deliver Crysis ransomware to the victim's system. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/negasteal-uses-hastebin-for-fileless-delivery-of-crysis-ransomware Updated: 2026-10-08 Category: research --- ## Nemty Ransomware Ceases Public Operations, Focuses on Private Schemes > Cybercriminals behind Nemty ransomware close down their Ransomware-as-a-Service (RaaS) operation as they zero in on private schemes. This is confirmed through a post in a Russian hacker forum. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/nemty-ransomware-ceases-public-operations-focuses-on-private-schemes Updated: 2026-10-16 Category: research --- ## Nemty Ransomware Spreads via Love Letter Emails > Nemty ransomware was spread through love letter emails, complete with romantic email subjects and nothing but a winky emoticon in the email body. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/nemty-ransomware-spreads-via-love-letter-emails Updated: 2026-10-09 Category: research --- ## NetWire RAT Hidden in IMG Files Deployed in BEC Campaign > A recent BEC campaign targets organizations by sending them emails with IMG (disk imaging) file attachments hiding a NetWire remote access trojan. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/netwire-rat-hidden-in-img-files-deployed-in-bec-campaign Updated: 2026-08-25 Category: research --- ## Network Security > TrendAI Vision One™ Network Security is a suite of solutions and tools that detect and prevent breaches at wire speed anywhere on your enterprise's network. URL: https://www.trendaisecurity.com/en-us/platform/network-security Updated: 2026-10-16 Category: platform --- ## New AndroRAT Exploits Allow for Permanent Rooting > A new variant of Android Remote Access Tool can inject root exploits to perform malicious tasks such as silent installation, shell command execution, WiFi password collection, and more. It targets CVE-2015-1805, a vulnerability disclosed in 2016. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/new-androrat-exploits-dated-permanent-rooting-vulnerability-allows-privilege-escalation Updated: 2026-08-26 Category: blog --- ## New Bait Used in Instagram Profile Hacking Scheme > Hackers spread messages supposedly sent from Instagram Help Center claiming that the user's account is at risk of being deleted. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/new-bait-used-in-instagram-profile-hacking-scheme Updated: 2026-08-05 Category: research --- ## New Extortion Campaign Threatens Victims of the 2015 Ashley Madison Breach > 5 years after the Ashley Madison breach, cybercriminals still capitalize on the incident by introducing a new sextortion scheme. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/new-extortion-campaign-threatens-victims-of-the-2015-ashley-madison-breach Updated: 2026-10-08 Category: research --- ## New Golang Ransomware Agenda Customizes Attacks > A new piece of ransomware written in the Go language has been targeting healthcare and education enterprises in Asia and Africa. This ransomware is called Agenda and is customized per victim. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/new-golang-ransomware-agenda-customizes-attacks Updated: 2026-08-14 Category: blog --- ## New LockBit 5.0 Targets Windows, Linux, ESXi > Trend™ Research analyzed source binaries from the latest activity from notorious LockBit ransomware with their 5.0 version that exhibits advanced obfuscation, anti-analysis techniques, and seamless cross-platform capabilities for Windows, Linux, and ESXi systems. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/lockbit-5-targets-windows-linux-esxi Updated: 2026-08-19 Category: blog --- ## New Mimic Ransomware Abuses Everything APIs for its Encryption Process > Trend Micro researchers discovered a new ransomware that abuses the APIs of a legitimate tool called Everything, a Windows filename search engine developed by Voidtools that offers quick searching and real-time updates for minimal resource usage. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/new-mimic-ransomware-abuses-everything-apis-for-its-encryption-p Updated: 2026-08-31 Category: blog --- ## New Ursnif Campaign Targets Users in Japan > Trend Micro researchers detected a new Ursnif campaign that targets Japan and spreads through malicious word document files. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/new-ursnif-campaign-targets-users-in-japan Updated: 2026-10-12 Category: research --- ## New Variant of Paradise Ransomware Spreads Through IQY Files > Paradise ransomware can now spread through Internet Query Files. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/new-variant-of-paradise-ransomware-spreads-through-iqy-files Updated: 2026-10-12 Category: research --- ## No Entry: How Attackers Can Sneak Past Facial Recognition Devices > Access control devices that use facial recognition manage entry and exit into an enterprise’s premises. They are essentially the first line of defense for many businesses, but are they secure? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/no-entry-how-attackers-can-sneak-past-facial-recognition-devices Updated: 2026-10-08 Category: research --- ## North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets > In a security alert posted on its website on January 31, The South Korean Computer Emergency Response Team (KR-CERT) warned of a zero-day vulnerability in Adobe Flash player that could be maliciously exploited. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/north-korean-hackers-allegedly-exploit-adobe-flash-player-vulnerability-cve-2018-4878-against-south-korean-targets Updated: 2026-08-05 Category: research --- ## Northeast Georgia Health System > 60% reduction in the amount of time spent investigating false positives with [TrendAI Vision One™]. URL: https://www.trendaisecurity.com/en-us/customer-stories/nghs Updated: 2026-07-10 Category: customerStory --- ## Observability Exposed: Exploring Risks in Cloud-Native Metrics > Container Advisor (cAdvisor) is an open-source monitoring tool for containers that is widely used in cloud services. It logs and monitors metrics like network input/output (I/O), disk I/O, and CPU usage. However, misconfigured deployments might inadvertently expose sensitive information, including environment variables such as Prometheus metrics. In this article, we share our findings of the risks we have uncovered and the vulnerable configurations users need to be aware of. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/observability-exposed-exploring-risks-in-cloud-native-metrics Updated: 2026-08-05 Category: research --- ## Old Vulnerabilities, New AI Era, Amplified Risk: How Outdated Flaws Continue to Fuel the N-Day Exploit Market > Even as AI adoption accelerates, old exploits remain overlooked weaknesses. Underground trends show a renewed demand for exploits, with cybercriminals relying on aging but still effective vulnerabilities. We examine this blind spot and why long-standing issues need to be addressed. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/old-vulnerabilities-new-ai-era-amplified-risk-how-outdated-flaws-continue-to-fuel-the-n-day-exploit-market Updated: 2026-08-05 Category: research --- ## On-Premises > Deploy the TrendAI Vision One™ platform and interface in your own data center, with complete authority over data, operations, and technology. URL: https://www.trendaisecurity.com/en-us/platform/deployment-options/on-premises Updated: 2026-10-16 Category: platform --- ## On-Premises Air-Gapped > Deploy the TrendAI Vision One™ platform in your own offline or air-gapped data center, fully isolated from external networks. URL: https://www.trendaisecurity.com/en-us/platform/deployment-options/on-premises-air-gapped Updated: 2026-10-16 Category: platform --- ## Online Dating Websites Lure Japanese Customers to Scams > We found online dating website scam campaigns primarily targeting Japanese customers for their personal and financial information. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/online-dating-websites-lure-japanese-customers-to-scams Updated: 2026-10-08 Category: research --- ## Open RAN: Attack of the xApps > This article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handling URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/open-ran-attack-of-the-xapps Updated: 2026-09-15 Category: research --- ## OpenClaw Security Analysis: The Unseen Risks of Agentic AI > We examine how OpenClaw’s exposed deployments, plaintext credential storage, prompt injection risks, unguarded MCP integrations, and malicious third-party skills amplify the security risks of agentic AI at enterprise scale. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/openclaw-security-analysis-the-hidden-risks-of-agentic-ai-at-scale Updated: 2026-09-25 Category: research --- ## Operation DRBControl: Uncovering a Cyberespionage Campaign Targeting Gambling Companies in Southeast Asia > The DRBControl campaign attacks its targets using a variety of malware and techniques that coincide with those used in other known cyberespionage campaigns. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/operation-drbcontrol-uncovering-a-cyberespionage-campaign-targeting-gambling-companies-in-southeast-asia Updated: 2026-08-05 Category: research --- ## Operation Earth Kitsune: Tracking SLUB’s Current Operations > A watering hole campaign we dubbed as Operation Earth Kitsune is spying on users’ systems through compromised websites. Using SLUB and two new malware variants, the attacks exploit vulnerabilities including those of Google Chrome and Internet Explorer. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/operation-earth-kitsune-tracking-slub-s-current-operations Updated: 2026-08-18 Category: research --- ## Operation Pawn Storm: Fast Facts and the Latest Developments > Operation Pawn Storm is an active economic and political cyber-espionage operation that has targeted high-profile entities from government institutions to media personalities. Here are its latest developments. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/operation-pawn-storm-fast-facts Updated: 2026-08-05 Category: research --- ## Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits > Trend™ Research has uncovered an attack campaign exploiting the Cisco SNMP vulnerability CVE-2025-20352, allowing remote code execution and rootkit deployment on unprotected devices, with impacts observed on Cisco 9400, 9300, and legacy 3750G series. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/operation-zero-disco-cisco-snmp-vulnerability-exploit Updated: 2026-08-27 Category: blog --- ## Over 30 Million Stolen Credit Card Records Being Sold on the Dark Web > Cybercriminals were found selling over 30 million credit card details from around 40K U.S. states and 100 countries. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/over-30-million-stolen-credit-card-records-being-sold-on-the-dark-web Updated: 2026-08-05 Category: research --- ## PII Leaks and Other Risks From Unsecure E-Commerce APIs > Our research takes an in-depth look at the security flaws that we found in the logistics API implementation of e-commerce platforms that can potentially leak the private information of consumers. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/pii-leaks-and-other-risks-from-unsecure-e-commerce-apis Updated: 2026-10-01 Category: research --- ## Panasonic Holdings Corporation > We are thrilled to have received the Trend Customer Award and extend our gratitude for the dual recognition, one for our Japan headquarters and the other for North America. The information system departments, particularly those involved in security often operate behind the scenes. Many overlook the complexity and dedication required to keep our system safe, assuming that “nothing is wrong, or nothing will happen. URL: https://www.trendaisecurity.com/en-us/customer-stories/panasonic-holdings Updated: 2026-09-11 Category: customerStory --- ## Partners > Explore alliance and channel partner opportunities with TrendAI™ and discover resources, benefits, and support to help grow your business. URL: https://www.trendaisecurity.com/en-us/partners Updated: 2026-09-24 Category: partner --- ## Patch List: Adobe, Citrix, Intel, and vBulletin Vulns > We rounded up information on recently published patches for Adobe, Citrix, Intel, and vBulletin. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/patch-list-adobe-citrix-intel-and-vbulletin-vulns Updated: 2026-10-08 Category: research --- ## Patch Now: F5 Vulnerability with CVSS 10 Severity Score > F5 Networks urges users to patch their BIG-IP networking systems ASAP, after the provider disclosed two vulnerabilities, namely CVE-2020-5902 and CVE-2020-5903. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/patch-now-f5-vulnerability-with-cvss-10-severity-score Updated: 2026-10-08 Category: research --- ## Patched Microsoft Access ‘MDB Leaker’ (CVE-2019-1463) Exposes Sensitive Data in Database Files > Researchers uncovered an information disclosure vulnerability (designated as CVE-2019-1463) affecting Microsoft Access, which occurs when the software fails to properly handle objects in memory. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/patched-microsoft-access-mdb-leaker-cve-2019-1463-exposes-sensitive-data-in-database-files Updated: 2026-10-09 Category: research --- ## Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities > This blog discusses the steganography, cloud abuse, and email-based backdoors used against the Ukrainian defense supply chain in the latest Pawn Storm campaign that TrendAI™ Research observed and analyzed. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/pawn-storm-targets-govt-infra Updated: 2026-08-19 Category: blog --- ## Pawn Storm Espionage Attacks Use Decoys, Deliver SEDNIT > This Trend Micro paper unravels a series of attacks that targets military officials and defense contractors. Dubbed as “Operation Pawn Storm,” the group of threat actors use two known attack vectors: spear phishing emails and a network of phishing websites. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/pawn-storm-espionage-attacks-use-decoys-deliver-sednit Updated: 2026-08-05 Category: research --- ## PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups > PeckBirdy is a sophisticated JScript-based C&C framework used by China-aligned APT groups to exploit LOLBins across multiple environments, delivering advanced backdoors to target gambling industries and Asian government entities. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/peckbirdy-script-framework Updated: 2026-08-19 Category: blog --- ## PeerSpot > The [TrendAI™] SOC team is the most valuable feature for us because having experts who monitor global threat landscapes and can respond accordingly is incredibly helpful. URL: https://www.trendaisecurity.com/en-us/customer-stories/peerspot-review-8078800 Updated: 2026-09-11 Category: customerStory --- ## Peerspot Liauat National Hospital and Medical College > TrendAI Vision One™ helps in identifying blind spots by providing comprehensive knowledge about risk assessment and a method to compare our organization with others, allowing us to understand our current stage in cybersecurity. URL: https://www.trendaisecurity.com/en-us/customer-stories/peerspot-liauat-national-hospital-medical-college Updated: 2026-09-28 Category: customerStory --- ## Phishing Site Uses Netflix as Lure, Employs Geolocation > A phishing site was found using a spoofed Netflix page to harvest account information, credit card credentials, and other PII. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/phishing-site-uses-netflix-as-lure-employs-geolocation Updated: 2026-08-28 Category: research --- ## Phishing Technique Uses Legitimate-looking Domains to Avoid Detection > Cybercriminals use legitimate-looking domains in their phishing-and-scam schemes in an effort to lure more victims and avoid early detection. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/phishing-technique-uses-legitimate-looking-domains-to-avoid-detection Updated: 2026-10-02 Category: research --- ## Phishing, Other Threats Target Email and Video App Users > Cybercriminals are using credential phishing sites to trick users into entering their credentials into fake login pages of email and collaboration platforms and videoconferencing apps. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/phishing-other-threats-target-email-and-video-app-users Updated: 2026-10-16 Category: research --- ## Phobos Emerges as a Formidable Threat in Q1 2024, LockBit Stays in the Top Spot: Ransomware in Q1 2024 > The landscape of ransomware attacks in the first quarter of 2024 presents new insights and shifts in tactics among cybercriminal groups. This report shows key players, targeted sectors, and geographic distributions of attacks by ransomware groups, both notorious and relatively new. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/phobos-emerges-as-a-formidable-threat-in-q1-2024-lockbit-stays-in-the-top-spot Updated: 2026-10-01 Category: research --- ## PingUs Solutions > We switched to TrendAI Vision One™ - Zero Trust Secure Access (ZTSA) - Al Service Access to increase the security of our employees and systems, and through the platform capabilities like XDR, we get a comprehensive overview of our security solutions as a whole. URL: https://www.trendaisecurity.com/en-us/customer-stories/pingus-solutions Updated: 2026-10-16 Category: customerStory --- ## Plastics Manufacturer > [TrendAI Vision One™] gives me a single dashboard where I can see if our systems are performing normally or not. It enables me to focus my attention where it’s needed. URL: https://www.trendaisecurity.com/en-us/customer-stories/plastics-manufacturer Updated: 2026-07-01 Category: customerStory --- ## Plugin Leaves Nearly 100,000 WordPress Sites Vulnerable to Compromise > The ThemeGrill Demo Importer plugin was found to leave nearly 100,000 WordPress websites vulnerable to threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/plugin-leaves-nearly-100-000-wordpress-sites-vulnerable-to-compromise Updated: 2026-10-12 Category: research --- ## Post-Quantum Cryptography: Migrating to Quantum Resistant Cryptography > In the previous parts of this series, we have learned about cryptography, what makes quantum computers unique, and how quantum computers break this cryptography. In the fourth and final part of our study on post-quantum cryptography, we will look at quantum-resistant algorithms that could replace our existing cryptography.   URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/post-quantum-cryptography-migrating-to-quantum-resistant-cryptography Updated: 2026-08-17 Category: research --- ## Post-Quantum Cryptography: Quantum Computing Attacks on Classical Cryptography > In this article, we confront contemporary cryptography with a (so far) hypothetical quantum computer to show how asymmetric algorithms may potentially be broken if quantum computing technology becomes viable. First, we take a step into some basic mathematical objects. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/post-quantum-cryptography-quantum-computing-attacks-on-classical-cryptography Updated: 2026-10-01 Category: research --- ## PowerGhost Spreads Beyond Windows Devices, Haunts Linux Machines > The detected PowerGhost variant can remove anti-malware products, maintain persistence, and drop other components. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/powerghost-spreads-beyond-windows-devices-haunts-linux-machines Updated: 2026-10-09 Category: research --- ## Preempting Threats to Connected Cars: The Importance of Cybersecurity in a Data-Driven Automotive Ecosystem > We examine the automotive data ecosystem and take a closer look at privacy and security concerns arising from how data is generated, consumed, and transmitted by connected vehicles. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/preempting-threats-to-connected-cars-the-importance-of-cybersecurity-in-a-data-driven-automotive-ecosystem Updated: 2026-09-16 Category: research --- ## Prescription for Risk: The Cybersecurity Hazards of GenAI in Healthcare > Generative AI now writes clinical notes, drafts patient replies, and decides claims, often faster than healthcare’s oversight can keep pace. TrendAI™ Research maps the resulting “custody gap” and the risk it creates, from the exam room to the back office, where AI-generated artifacts can enter patient records. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/prescription-for-risk-the-cybersecurity-hazards-of-genai-in-healthcare Updated: 2026-10-01 Category: research --- ## Preventing an Imminent Ransomware Attack With Early Detection and Investigation > In this feature, we look at how the prompt investigation of warning signs can help block possible major cyberattacks. We also detail the specific security gaps of one organization that can serve as a cautionary tale for other businesses to constantly secure their systems against ransomware attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/preventing-an-imminent-ransomware-attack-with-early-detection-and-investigation Updated: 2026-09-28 Category: research --- ## Pricing and Licensing > Simplify how you purchase, deploy, and manage security with TrendAI™ Flex, one credit-based license for 30+ TrendAI Vision One™ solutions across your enterprise. URL: https://www.trendaisecurity.com/en-us/platform/flex-licensing Updated: 2026-09-28 Category: platform --- ## Proactive Security Insights for SharePoint Attacks (CVE-2025-53770 and CVE-2025-53771) > CVE-2025-53770 and CVE-2025-53771 are vulnerabilities in on-premise Microsoft SharePoint Servers that evolved from previously patched flaws, allowing unauthenticated remote code execution through advanced deserialization and ViewState abuse. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cve-2025-53770-and-cve-2025-53771-sharepoint-attacks Updated: 2026-08-23 Category: blog --- ## Proactive Security: The Role of Exposure Management and Detection-Response Capability > Cyberattacks are growing increasingly sophisticated and frequent, which is why security strategies focused solely on detection and response are no longer sufficient. This reality brings renewed attention to the importance of identifying and mitigating cyber risks before incidents occur. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/proactive-security-the-role-of-exposure-management-and-detection-response-capability Updated: 2026-08-09 Category: research --- ## Probing Pawn Storm: Cyberespionage Campaign Through Scanning, Credential Phishing and More > The notorious threat group Pawn Storm has been known to target high-profile entities, from governments to media for years. This research paper looks into the ways the group compromised email addresses and servers to facilitate credential phishing attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/probing-pawn-storm-cyberespionage-campaign-through-scanning-credential-phishing-and-more Updated: 2026-08-07 Category: research --- ## Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups > Our research into cloud-based cryptocurrency mining sheds light on the malicious actor groups involved in this space, their ongoing battle for cloud resources, and the actual extent of the impact of their attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/probing-the-activities-of-cloud-based-cryptocurrency-mining-groups Updated: 2026-08-05 Category: research --- ## Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant > TrendAI™ Research provides a comprehensive analysis of the RedC2 Linux Implant, a sophisticated threat recently discovered in the npm open-source ecosystem.  URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/redc2-ai-powered-linux-implant Updated: 2026-08-25 Category: blog --- ## Protecting Your Krew: A Security Analysis of kubectl Plug-ins > We looked into the security of kubectl plug-ins in Krew and how supply chains' projects can be at risk. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/protecting-your-krew-a-security-analysis-of-kubectl-plug-ins Updated: 2026-09-28 Category: research --- ## Puerto Rico Loses Millions in Email Scam > The hacked email account of a finance employee was exploited to steal millions of dollars from the Puerto Rico government. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/puerto-rico-loses-millions-in-email-scam Updated: 2026-08-25 Category: research --- ## PureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading > Job seekers looking out for opportunities might instead find their personal devices compromised, as a PureRAT campaign propagated through email leverages Foxit PDF Reader for concealment and DLL side-loading for initial entry. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/valleyrat-campaign Updated: 2026-08-14 Category: blog --- ## Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet > 47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/pwn2own-berlin-2026 Updated: 2026-09-16 Category: blog --- ## Pwning Agentic AI Part I: Your AI Agent Is Already Compromised > Organizations are rapidly connecting AI agents to their databases, document pipelines, and internal tools, creating privileged components that read untrusted input as part of their job. TrendAI™ Research examines how attackers turn these agents against you through return-to-tool (RTT) exploits, and what this means for the future of agentic AI security. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/pwning-agentic-ai-part-i-your-ai-agent-is-already-compromised Updated: 2026-08-27 Category: research --- ## Pwning Agentic AI Part II: When Trusted Agents Do Untrusted Things > Return-to-tool isn't theoretical. TrendAI™ Research presents three cases showing exactly how a compromised agent—wielding only its own approved tools—becomes the most dangerous component in the stack. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/pwning-agentic-ai-part-ii-when-trusted-agents-do-untrusted-things Updated: 2026-08-27 Category: research --- ## Pwning Agentic AI Part III: Securing Your AI Agent > This final installment of our trilogy on Pwning Agentic AI covers defenses against the return-to-tool (RTT) attacks—read-only Postgres bypass, support-ticket ransomware, and KYC passport exfiltration—demonstrated in Part II. Here we take a look at what works and what doesn’t against this new class of attack. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/pwning-agentic-ai-part-iii-securing-your-ai-agent Updated: 2026-08-27 Category: research --- ## Qakbot Resurges, Spreads through VBS Files > We have seen events that point to the resurgence of Qakbot, a multi-component, information-stealing threat first discovered in 2007. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/qakbot-resurges-spreads-through-vbs-files Updated: 2026-08-18 Category: research --- ## Ranked First on CyberGym: TrendAI™ Agentic Exploit-Remediation Engine Scores 97% on the Top Exploit Benchmark > The TrendAI™ agentic exploit-remediation engine, code name AESIR, ranks first on CyberGym at 97% — more than 12 points ahead of both GPT-5.6 Sol and Claude Mythos 5. AI system architecture beats raw model capability. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/trendai-first-on-cybergym-top-exploit-benchmark Updated: 2026-10-10 Category: blog --- ## Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus > We investigate mhyprot2.sys, a vulnerable anti-cheat driver for the popular role-playing game Genshin Impact. The driver is currently being abused by a ransomware actor to kill antivirus processes and services for mass-deploying ransomware. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus Updated: 2026-08-20 Category: blog --- ## Ransomware Double Extortion and Beyond: REvil, Clop, and Conti > Ransomware-stricken organizations grapple with multilevel extortion schemes that are advancing at an alarming rate. What exactly happens in these campaigns? We scrutinize three active ransomware families associated with these schemes to find out. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-double-extortion-and-beyond-revil-clop-and-conti Updated: 2026-08-05 Category: research --- ## Ransomware Hits U.S. Electric Utility > The Reading Municipality Light Department was attacked by ransomware. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-hits-u-s-electric-utility Updated: 2026-10-09 Category: research --- ## Ransomware Recap: Clop, DeathRansom, and Maze Ransomware > As the new year rolls in, new developments in different ransomware strains have emerged. Here we discuss the different techniques that Clop, DeathRansom, and Maze ransomware use and the ways users and organizations can protect themselves against infection. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-recap-clop-deathransom-and-maze-ransomware Updated: 2026-10-09 Category: research --- ## Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted > In this report, we discussed new ransomware family Avaddon, updates on techniques of other ransomware, and our latest figures. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-report-avaddon-and-new-techniques-emerge-industrial-sector-targeted Updated: 2026-08-08 Category: research --- ## Ransomware Spotlight: 8Base > Despite positioning themselves as penetration testers, 8Base ransomware threat actors profit off their victims that are significantly comprised of small businesses. In this feature, we investigate how the gang operates to gain insights on how organizations can protect systems better from compromises that could result in financial loss.   URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-8base Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Agenda > Agenda has rapidly grown into one of the most prolific and dangerous ransomware operations, leveraging advanced techniques, cross-platform variants, and alliances with other major threat groups. Its aggressive double-extortion model and expanding victim base across critical industries make it a serious enterprise risk that demands proactive detection and defense. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-agenda Updated: 2026-08-28 Category: research --- ## Ransomware Spotlight: Akira > This report spotlights Akira, a novel ransomware family with highly experienced and skilled operators at its helm. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-akira Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: AvosLocker > AvosLocker is a relatively new ransomware variant that sports the staples of modern ransomware, namely a layered extortion scheme that begins with stolen data. We shed light on this emerging ransomware family and its key techniques. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-avoslocker Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Black Basta > A relative newcomer in 2022, the Black Basta ransomware group has wasted no time making a name for itself by upgrading its toolset and racking up its victim count around the world mere months since its ransomware was first detected. Learn more about this new ransomware and fortify your organization’s defenses against this threat. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-blackbasta Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: BlackByte > BlackByte is a ransomware group that has been building a name for itself since 2021. Like its contemporaries, it has gone after critical infrastructure for a higher chance of getting a payout. What techniques sets it apart? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-blackbyte Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: BlackCat > Known for its unconventional methods and use of advanced extortion techniques, BlackCat has quickly risen to prominence in the cybercrime community. As this ransomware group forges its way to gain more clout, we examine its operations and discuss how organizations can shore up their defenses against it. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-blackcat Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Clop > We take a closer look at the operations of Clop, a prolific ransomware family that has gained notoriety for its high-profile attacks. We review this ransomware group’s constantly changing schemes and discuss how companies can shore up defenses against this threat. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-clop Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Conti > Assumed to be the successor of the Ryuk ransomware, Conti is currently one of the most notorious active ransomware families used in high-profile attacks. Know all about this ransomware family and protect your company against this threat. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-conti Updated: 2026-08-06 Category: research --- ## Ransomware Spotlight: Cuba > Cuba ransomware emerged on the scene with a spate of high-profile attacks in late 2021. Armed with an expansive infrastructure, impressive tools, and associated malware, Cuba ransomware is considered a significant player in the threat landscape, and is likely to remain so in the future through its continued evolution. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-cuba Updated: 2026-08-06 Category: research --- ## Ransomware Spotlight: DragonForce > DragonForce, a Ransomware-as-a-Service group first observed in 2023, rose to greater prominence in 2025 after a series of notable attacks linked to the group. Despite its unclear origins, what is evident is its rapid evolution and its aggressive, affiliate-driven model, marking it as a rising threat to watch out for. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-dragonforce Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Hive > Hive ransomware is one of the new ransomware families in 2021 that poses significant challenges to enterprises worldwide. We take an in-depth look at the ransomware group’s operations and discuss how organizations can bolster their defenses against it. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-hive Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: INC > INC ransomware has been observed to exploit CVE-2023-3519 and uses HackTool.Win32.ProcTerminator.A for defense evasion and HackTool.PS1.VeeamCreds for credential access in its different attack chains. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-inc Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: LockBit > The LockBit intrusion set, tracked by Trend Micro as Water Selkie, has one of the most active ransomware operations today. With LockBit’s strong malware capabilities and affiliate program, organizations should keep abreast of its machinations to effectively spot risks and defend against attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-lockbit Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Magniber > The Magniber ransomware initially targeted only Asian countries when it was first detected in 2017. However, it resurfaced in 2021 and continues to operate today with expanded targets around the globe. Magniber remains a significant player in the threat landscape, with malicious attackers likely to continue using the ransomware in future. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-magniber Updated: 2026-08-17 Category: research --- ## Ransomware Spotlight: Play > Play is shaping up to be a player on the rise within the ransomware landscape, with its operators likely to continue using the ransomware in future. We take a deep dive into its operations and offer ways in which organizations can shore up their defenses against this emerging threat. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-play Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: REvil > Now that the reign of REvil has come to an end, it's time to regroup and strategize. What can organizations learn from REvil’s tactics? We review the rise, downfall, and future of its operations using insights into the group's arsenal and inner inner workings. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-revil Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: RansomEXX > RansomEXX is a ransomware variant that gained notoriety after a spate of attacks in 2020 and continues to be active today. With its targeted nature and history for choosing high-profile victims, we shine our spotlight on RansomEXX to reveal its tactics, techniques, and procedures. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-ransomexx Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Ransomhub > RansomHub is a young Ransomware-as-a-Service (RaaS) group tracked by Trend Micro as Water Bakunawa. Despite being a young ransomware group first detected in February 2024, RansomHub moves boldly by targeting larger enterprises more likely to pay ransoms. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-ransomhub Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Rhysida > The threat actors behind the Rhysida ransomware targeted multiple industries by posing as a cybersecurity team that offered to help its victims identify security weaknesses in their networks and systems. Although the group’s activity was first observed back in May 2023, its leak site was established as early as March 2023. Like other ransomware groups, it employs double extortion tactics to pressure its victims into paying a ransom demand in Bitcoin. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-rhysida Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Royal > Backed by threat actors from Conti, Royal ransomware is poised to wreak havoc in the threat landscape, starting strong by taking a spot among the most prolific ransomware groups within three months since it was first reported. Combining new and old techniques and quick evolution, it is likely to remain a big player in the threat landscape in the future. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-royal Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: TargetCompany > We detail everything you need to know about TargetCompany, a ransomware family with different monickers, including the evolution of its attack flow as it cemented its place in the threat landscape. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-targetcompany Updated: 2026-08-05 Category: research --- ## Ransomware Spotlight: Trigona > After the shutdown of its leak site in October, we look at how ransomware group Trigona operated during its period of activity and discuss how enterprises can fortify their defenses against similar threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-trigona Updated: 2026-08-11 Category: research --- ## Ransomware Spotlight: Water Ouroboros > Water Ouroboros (aka Hunters International) is a Ransomware-as-a-Service (RaaS) group that first emerged in October 2023. It is suspected to be a possible spin-off of Hive ransomware, which had its activities disrupted by the Federal Bureau of Investigation (FBI) in January 2023. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-spotlight-water-ouroboros Updated: 2026-08-24 Category: research --- ## Ransomware as a Service: Enabler of Widespread Attacks > Ransomware as a service (RaaS) equips prospective attackers, even those who possess minimal technical skills and knowledge, with the ammunition they need to launch attacks. This in turn helps ransomware spread quickly to more targets. What exactly is RaaS, and which ransomware families and techniques are associated with it? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-as-a-service-enabler-of-widespread-attacks Updated: 2026-09-11 Category: research --- ## Ransomware: What It Is and How You Can Protect Yourself > Ransomware is a type of malware that locks your computer screen and prevents you from accessing your files until you pay a “ransom”. Learn more about this type of malware and how you can prevent likely attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ransomware-what-it-is-and-how-you-can-protect-yourself Updated: 2026-08-05 Category: research --- ## Real Estate Company > We respond much faster thanks to the intelligence used by [TrendAI™]. They have very good knowledge because they have many threat sources. URL: https://www.trendaisecurity.com/en-us/customer-stories/real-estate-co-sr-security-mgr-peerstory Updated: 2026-09-11 Category: customerStory --- ## Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores > A spate of new attacks targeting the Android operating system have been discovered using a banking trojan named Red Alert 2.0. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/red-alert-2-0-android-trojan-spreads-via-third-party-app-stores Updated: 2026-08-05 Category: research --- ## Red and Purple Teaming URL: https://www.trendaisecurity.com/en-us/services/red-purple-teaming Updated: 2026-09-24 Category: services --- ## Regional Public SaaS > Deploy TrendAI Vision One™ with regional public SaaS. Scale faster, reduce infrastructure management, and support regional data residency requirements. URL: https://www.trendaisecurity.com/en-us/platform/deployment-options/regional-saas Updated: 2026-10-16 Category: platform --- ## Reimagining Fraud Operations: The Rise of AI-Powered Scam Assembly Lines > Trend™ Research replicated an AI-powered scam assembly line to reveal how AI is eradicating the barrier for entry to running scams, making fraud easier to run, harder to detect, and effortless to scale. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/reimagining-fraud-operations-the-rise-of-ai-powered-scam-assembly-lines Updated: 2026-08-05 Category: research --- ## Reinforcing NAS Security Against Pivoting Threats > We analyze some existing and developing threats that target NAS devices of users and businesses. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/reinforcing-nas-security-against-pivoting-threats Updated: 2026-10-05 Category: research --- ## Researchers Use Smart Light Bulbs to Infiltrate Networks > Researchers discovered a vulnerability in smart light bulbs that can allow hackers to install malware and infect other IoT devices. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/researchers-use-smart-light-bulbs-to-infiltrate-networks Updated: 2026-08-05 Category: research --- ## Resources and Insights URL: https://www.trendaisecurity.com/en-us/resources-insights Updated: 2026-09-25 Category: resourceHub --- ## Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data > China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/rethinking-the-external-attack-surface-managing-the-growing-risk-of-open-cyber-physical-data Updated: 2026-09-14 Category: research --- ## Return to Sender: Preventing Ransomware While Working From Home > Many employees have set up makeshift work spaces in their homes. This could leave them more susceptible to ransomware attacks that take advantage of vulnerabilities in unsecured spaces. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/return-to-sender-preventing-ransomware-while-working-from-home Updated: 2026-08-28 Category: research --- ## Rise in Active RaaS Groups Parallel Growing Victim Counts: Ransomware in 2H 2023 > We cover the key trends that defined the ransomware threat landscape in the second half of 2023. Data from RaaS and extortion groups’ leak sites, open-source intelligence (OSINT) research, and the Trend Micro telemetry shows that LockBit, BlackCat, and Clop continued to rank among the active RaaS and extortion groups with the highest victim counts during this period. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/rise-in-active-raas-groups-parallel-growing-victim-counts-ransomware-in-2h-2023 Updated: 2026-10-01 Category: research --- ## Rising From the Underground: Hacktivism in 2024 > We have been looking at the hacktivism landscape to help the United Nations Interregional Crime and Justice Research Institute (UNICRI) understand this cybercriminal phenomenon for their paper on the topic. The UNICRI paper was released today at a launch event held at the United Nations headquarters where we gave an overview on emerging trends in the underground. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/rising-from-the-underground-hacktivism-in-2024 Updated: 2026-10-01 Category: research --- ## Rising Security Weaknesses in the Automotive Industry and What It Can Do on the Road Ahead > VicOne’s annual cyberthreat landscape report gives an idea of the coming reality of cyberthreats to modern cars. A chief concern is the vulnerabilities that could spell new risks to the connected vehicle ecosystem. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/rising-security-weaknesses-in-the-automotive-industry-and-what-it-can-do-on-the-road-ahead Updated: 2026-10-01 Category: research --- ## Rogue Robots: Testing the Limits of an Industrial Robot’s Security > The modern world relies heavily on industrial robots. But is the current robotics ecosystem secure enough to withstand a cyber attack? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/rogue-robots-testing-industrial-robot-security Updated: 2026-08-05 Category: research --- ## RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits > The Trend Zero Day Initiative™ (ZDI) and Trend™ Research teams have identified a large-scale RondoDox botnet campaign exploiting over 50 vulnerabilities across more than 30 vendors, including flaws first seen in Pwn2Own contests. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/rondodox Updated: 2026-09-11 Category: blog --- ## Russian Group Cosmic Lynx Launches Over 200 BEC Campaigns > A Russian group dubbed as Cosmic Lynx initiated more than 200 BEC campaigns targeting hundreds of multinational companies. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/russian-group-cosmic-lynx-launches-over-200-bec-campaigns Updated: 2026-10-08 Category: research --- ## Russian Investigators Bust Credit Card Fraud Ring > At least 25 people allegedly including a kingpin were arrested for card fraud by Russian federal investigators. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/russian-investigators-bust-credit-card-fraud-ring Updated: 2026-10-07 Category: research --- ## Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader > Starting this year, Ryuk began using another dropper called BazarLoader (also known as BazarBackdoor), which is primarily distributed via phishing emails that contain either malicious attachments or links to websites that host malware. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ryuk-2020-distributing-ransomware-via-trickbot-and-bazarloader Updated: 2026-08-11 Category: research --- ## Ryuk Ransomware Infects US Government Contractor > US government contractor Electronic Warfare Associates (EWA) was infected with Ryuk ransomware, compromising web servers and subsidiary websites. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/ryuk-ransomware-infects-us-government-contractor Updated: 2026-10-12 Category: research --- ## SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics > In November, a targeted spear-phishing campaign was observed using Trend Micro-themed lures against various industries, but this was quickly detected and thwarted by the Trend Vision One™ platform. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/SHADOW-VOID-042 Updated: 2026-08-18 Category: blog --- ## SHAREit Flaw Could Lead to Remote Code Execution > We discovered vulnerabilities in the SHAREit application. These vulnerabilities can be abused to leak a user’s sensitive data, execute arbitrary code, and possibly lead to remote code execution. The app has over 1 billion downloads. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/shareit-flaw-could-lead-to-remote-code-execution Updated: 2026-08-25 Category: blog --- ## SORA and UNSTABLE: 2 Mirai Variants Target Video Surveillance Storage Systems > Vulnerable video surveillance storage systems are exploited by the two Mirai variants, SORA and UNSTABLE. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/sora-and-unstable-2-mirai-variants-target-video-surveillance-storage-systems Updated: 2026-08-28 Category: research --- ## Safe and Smart Connections: Securing IoT Networks for Remote Setups > We re-examine the role of networks in IoT security during this period of work-from-home arrangements and growing reliance on smart devices. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/safe-and-smart-connections-securing-iot-networks-for-remote-setups Updated: 2026-10-02 Category: research --- ## Scarecrow: Making the Attacker’s AI Say No > We developed Scarecrow, a tool that hides refusal instructions in documents so AI agents ingesting them are prompted to stop processing. Our findings show that this same technique can help defenders disrupt AI-driven access to sensitive documents. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/scarecrow-making-the-attackers-ai-say-no Updated: 2026-10-13 Category: research --- ## Securing Cloud-Native Environments with Zero Trust: Real-World Attack Cases > The zero trust security model, which assumes that everything and everyone is a potential threat, is an approach to security that is becoming increasingly popular, especially in and for cloud-native environments. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/zero-trust-security-a-practical-guide-for-cloud-native-environments Updated: 2026-09-28 Category: research --- ## Securing Enterprise Security: How to Manage the New Generation of Access Control Devices > Given the increasing use by enterprises of contactless security solutions, the security of the devices that themselves are meant to control access to premises should be of prime consideration. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/securing-enterprise-security-how-to-manage-the-new-generation-of-access-control-devices Updated: 2026-10-02 Category: research --- ## Securing IoT Apps > Many work-from-home employees use devices for personal and business purposes in home networks that are not as secure as that of the office. This article discusses the threats to unsecure IoT apps and provides ways to secure them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/securing-iot-apps Updated: 2026-10-02 Category: research --- ## Securing Sovereign AI: Practical Controls Across Physical, Software, and Model Supply Chains > Sovereign AI places responsibility for every layer of the security stack in the operator's hands, and this article examines the threats that accompany that shift alongside the practical controls that keep nationally owned AI systems trustworthy. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/securing-sovereign-ai-practical-controls-across-physical-software-and-model-supply-chains Updated: 2026-08-12 Category: research --- ## Securing the 4 Cs of Cloud-Native Systems: Cloud, Cluster, Container, and Code > Cloud-native security adopts the defense-in-depth approach and divides the security strategies utilized in cloud-native systems into four different layers: cloud, container, cluster, code. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/securing-the-4-cs-of-cloud-native-systems-cloud-cluster-container-and-code Updated: 2026-08-12 Category: research --- ## Security 101: Business Email Compromise (BEC) Schemes > The Federal Bureau of Investigation (FBI) released a public service announcement earlier this year warning about Business Email Compromise (BEC) schemes. Here’s what you need to know, and what you can do to prevent attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/business-email-compromise-bec-schemes Updated: 2026-08-05 Category: research --- ## Security 101: How Fileless Attacks Work and Persist in Systems > Many attackers are switching from file-based malware to memory-based attacks to improve their stealth. “Fileless,” “zero-footprint,” or “living off the land” threats use legitimate applications to carry out malicious activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-101-how-fileless-attacks-work-and-persist-in-systems Updated: 2026-08-17 Category: research --- ## Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection) > This article zeroes in on certain security considerations that developers need to know and the ways that they can build the best defense for container-based and serverless applications through runtime application self-protection (also known as RASP). URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-101-protecting-serverless-and-container-applications-with-rasp-runtime-application-self-protection Updated: 2026-08-11 Category: research --- ## Security 101: The Impact of Cryptocurrency-Mining Malware > As cryptocurrencies like bitcoin are more widely used, so will the threats that cybercriminals use to abuse it. Here’s a closer look at cryptocurrency-mining malware—their emergence in the threat landscape, impact, and some countermeasures against them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-101-the-impact-of-cryptocurrency-mining-malware Updated: 2026-08-05 Category: research --- ## Security 101: The Rise of Fileless Threats that Abuse PowerShell > Filess malware that abuse Windows’ PowerShell are now increasingly becoming more common—from ransomware, click-fraud malware to Trojan downloaders. Here’s a closer look on how to mitigate these threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-101-the-rise-of-fileless-threats-that-abuse-powershell Updated: 2026-08-14 Category: research --- ## Security 101: Virtual Patching > What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-101-virtual-patching Updated: 2026-08-25 Category: research --- ## Security On-The-Go: Setting up a Virtual Private Network (VPN) > There are privacy and security risks involved in connecting to public or 'free' Wi-fi hotspots. Here's a 4-step guide to setting up a virtual private network (VPN) for the times when you have to connect to unfamiliar networks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/setting-up-a-virtual-private-network-vpn Updated: 2026-08-05 Category: research --- ## Security Operations > Formerly XDR, TrendAI Vision One™ Security Operations (SecOps) is the first Agentic SIEM that thinks in language, not just logs. URL: https://www.trendaisecurity.com/en-us/platform/security-operations Updated: 2026-10-16 Category: platform --- ## Security for Entertainment IoT > The IoT has opened new avenues for creating and consuming media and entertainment. To fully benefit from these innovations, users must be aware of and deal with the risks that devices could bring into their homes. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-for-entertainment-iot Updated: 2026-09-28 Category: research --- ## Security for the Next-Generation Retail Supply Chain > What would shopping and retail be like in the future? We considered today's technologies to predict what’s in store for retail in 2030 and what that means for security. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-for-the-next-generation-retail-supply-chain Updated: 2026-10-07 Category: research --- ## Security in the Era of Industry 4.0: Dealing With Threats to Smart Manufacturing Environments > As manufacturing companies continue to adopt Industry 4.0, many environments could still be falling short on security with outdated systems, unpatched vulnerabilities, and unsecure files that leave them vulnerable to attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/security-in-the-era-of-industry-4-dealing-with-threats-to-smart-manufacturing-environments Updated: 2026-08-05 Category: research --- ## Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users > TrendAI™ Research has identified an active campaign spreading via WhatsApp through a ZIP file attachment. When executed, the malware establishes persistence and hijacks the compromised WhatsApp account to send copies of itself to the victim's contacts. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/self-propagating-malware-spreads-via-whatsapp Updated: 2026-08-27 Category: blog --- ## Services > Get Cyber Risk Advisory for Trend Micro's services for enterprise companies using TrendAI Vision One™ security solutions. URL: https://www.trendaisecurity.com/en-us/services Updated: 2026-09-07 Category: services --- ## Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment > A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/sextortion-scheme-claims-use-of-home-cameras-demands-bitcoin-or-gift-card-payment Updated: 2026-08-18 Category: research --- ## Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems > Shai-hulud 2.0 campaign features a sophisticated variant capable of stealing credentials and secrets from major cloud platforms and developer services, while automating the backdooring of NPM packages maintained by victims. Its advanced tactics enable rapid, stealthy propagation across the software supply chain, putting countless downstream users at risk. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/shai-hulud-2-0-targets-cloud-and-developer-systems Updated: 2026-08-18 Category: blog --- ## Shedding Light on Security Considerations in Serverless Cloud Architectures > Serverless computing is not immune to risks and threats. Our security research provides a comprehensive analysis of the possible attack scenarios that could compromise serverless services and deployments. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/shedding-light-on-security-considerations-in-serverless-cloud-architectures Updated: 2026-08-13 Category: research --- ## Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing > A targeted underground doxxing campaign exposed alleged core members of Lumma Stealer (Water Kurita), resulting in a sharp decline in its activity and a migration of customers to rival infostealer platforms. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/the-impact-of-water-kurita-lumma-stealer-doxxing Updated: 2026-08-20 Category: blog --- ## ShinyHunters Returns to PeopleSoft With a One-Character WAF Bypass > ShinyHunters is once again exploiting a previously patched vulnerability in PeopleSoft, which we analyzed in June 2026. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/shinyhunters-peoplesoft-one-character-waf-bypass Updated: 2026-10-01 Category: blog --- ## Sierra-Cedar > We’re honoured to receive Trend Micro’s Global Customer Excellence Award. […] Our close collaboration with Trend – embracing new solutions early and influencing their evolution – has been instrumental in advancing our cloud and security initiatives. […] Trend’s innovative technology and exceptional partnership empower us to deliver stronger outcomes. URL: https://www.trendaisecurity.com/en-us/customer-stories/sierra-cedar Updated: 2026-08-28 Category: customerStory --- ## Silent Sabotage: Weaponizing AI Models in Exposed Containers > How can misconfigurations help threat actors abuse AI to launch hard-to-detect attacks with massive impact? We reveal how AI models stored in exposed container registries could be tampered with— and how organizations can protect their systems. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/silent-sabotage-weaponizing-ai-models-in-exposed-containers Updated: 2026-08-07 Category: research --- ## Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions > Trend Micro's Threat Hunting Team has observed EDRSilencer, a red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/edrsilencer-disrupting-endpoint-security-solutions Updated: 2026-08-25 Category: blog --- ## Slopsquatting: When AI Agents Hallucinate Malicious Packages > Our research examines how AI coding assistants can hallucinate plausible but non-existent package names—therefore enabling slopsquatting attacks—while also providing practical defense strategies that organizations can implement to secure their development pipelines URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/slopsquatting-when-ai-agents-hallucinate-malicious-packages Updated: 2026-08-05 Category: research --- ## Small Business > Get cybersecurity for your small or medium-sized business via TrendAI Vision One™. URL: https://www.trendaisecurity.com/en-us/solutions/small-business Updated: 2026-09-24 Category: solution --- ## Smart Yet Flawed: IoT Device Vulnerabilities Explained > Are your smart devices vulnerable? Here are common vulnerabilities found in IoT devices and how to secure against them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/smart-yet-flawed-iot-device-vulnerabilities-explained Updated: 2026-08-05 Category: research --- ## SocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware > Trend Research analyzed SocGholish’s MaaS framework and its role in deploying RansomHub ransomware through compromised websites, using highly obfuscated JavaScript loaders to evade detection and execute various malicious tasks. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/socgholishs-intrusion-techniques-facilitate-distribution-of-rans Updated: 2026-10-12 Category: blog --- ## Sockpuppeting: How a Single Line Can Bypass LLM Safety Guardrails > A jailbreak through sockpuppeting can be easily done as it requires no special tools nor optimization. It only takes a faulty prefill feature, and the gates are open. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/sockpuppeting-how-a-single-line-can-bypass-llm-safety-guardrails Updated: 2026-08-13 Category: research --- ## Sodinokibi Ransomware Increases Yearend Activity, Targets Airport and Other Businesses > The Sodinokibi ransomware ended the year with a bang by launching a new round of attacks aimed at multiple organizations, including the Albany International Airport and the foreign exchange company Travelex. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/sodinokibi-ransomware-increases-yearend-activity-targets-airport-and-other-businesses Updated: 2026-10-12 Category: research --- ## Solutions > Explore cybersecurity solutions built for your industry, team size, and security challenges with TrendAI Vision One™, the AI-ready enterprise platform. URL: https://www.trendaisecurity.com/en-us/solutions Updated: 2026-10-16 Category: solution --- ## South Carolina State Library > TrendAI Vision One™ has detected attempted attacks that the state SOC has missed, enabling us to swiftly halt these attacks and address the vulnerabilities before they escalate into more widespread problems. URL: https://www.trendaisecurity.com/en-us/customer-stories/south-carolina-state-library Updated: 2026-09-28 Category: customerStory --- ## South London and Maudsley NHS Foundation Trust URL: https://www.trendaisecurity.com/en-us/customer-stories/south-london-and-maudsley-nhs-foundation-trust Updated: 2026-07-10 Category: customerStory --- ## Sovereign Cloud > Deploy TrendAI Vision One™ in sovereign cloud infrastructure for unified security with greater control over your data and platform operations. URL: https://www.trendaisecurity.com/en-us/platform/deployment-options/sovereign-cloud Updated: 2026-10-16 Category: platform --- ## Sovereign and Private Cloud (SPC) > TrendAI Vision One™ SPC delivers sovereign cybersecurity with complete control over data residency, encryption, key management, and operations. URL: https://www.trendaisecurity.com/en-us/platform/sovereign-private-cloud Updated: 2026-10-16 Category: platform --- ## Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities > We uncover how a campaign used Atlassian Jira Cloud to launch automated and targeted spam campaigns, exploiting trusted SaaS workflows to bypass security controls. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/spam-campaign-abuses-atlassian-jira Updated: 2026-09-30 Category: blog --- ## Spear Phishing 101: What is Spear Phishing? > The objective of spear phishing and phishing are ultimately the same—to trick a target into opening an attachment or click on a malicious embedded link. But what is spear phishing? Learn more from this article. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/spear-phishing-101-what-is-spear-phishing Updated: 2026-08-05 Category: research --- ## Stars Don’t Save You: Popularity Is Not Security in the MCP Ecosystem > Building on our previous research, we correlated the security issues identified in public MCP servers with metadata crawled from popular directories. We then analyzed whether indicators such as popularity, activity, and vetting serve as reliable metrics to infer the risk of adopting an MCP server. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/stars-dont-save-you-popularity-is-not-security-in-the-mcp-ecosystem Updated: 2026-09-11 Category: research --- ## Stay Ahead of AI Threats: Secure LLM Applications With Trend Vision One > Trend Vision One™ tackles 9 of OWASP’s Top 10 LLM vulnerabilities, offering comprehensive protection against prompt injection, data leakage, AI supply chain risks, and other critical flaws. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/stay-ahead-of-ai-threats-secure-llm-applications-with-trend-vision-one Updated: 2026-08-05 Category: research --- ## Steering Clear of Security Blind Spots: What SOCs Need to Know > As technologies continue to evolve and expand, organizations experience a technological paradox: Their increasing interconnectivity means that they simultaneously become more distributed. Case in point, robust cloud and networking technologies support today’s widespread adoption of hybrid and remote work arrangements, allowing employees all over the globe to work remotely full time or at least part of the time. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/steering-clear-of-security-blind-spots-what-socs-need-to--know Updated: 2026-08-12 Category: research --- ## Step2 > The [TrendAI™] team is always available. Anytime we have issues, they’re there to support us. that’s the type of company that Step2 wants to partner with. URL: https://www.trendaisecurity.com/en-us/customer-stories/step2 Updated: 2026-09-11 Category: customerStory --- ## Stolen Credit Card Data Concealed through Fake Club Membership Cards > The fake cards, looking like club membership cards from major retail stores, have barcodes that hide credit card details. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/stolen-credit-card-data-concealed-through-fake-club-membership-cards Updated: 2026-10-12 Category: research --- ## Supply Chain Attacks in the Age of Cloud Computing: Risks, Mitigations, and the Importance of Securing Back Ends > A critical asset that enterprises should give careful security consideration to is their back-end infrastructure which, if compromised, could lead to supply chain attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/supply-chain-attacks-cloud-computing Updated: 2026-10-02 Category: research --- ## Surging Hype: An Update on the Rising Abuse of GenAI > The cybercriminal abuse of generative AI (GenAI) is developing at a blazing pace. After only a few weeks since we reported on Gen AI and how it is used for cybercrime, new key developments have emerged. Threat actors are proliferating their offerings on criminal large language models (LLMs) and deepfake technologies, ramping up the volume and extending their reach. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/surging-hype-an-update-on-the-rising-abuse-of-genai Updated: 2026-08-05 Category: research --- ## Tailing Big Head Ransomware’s Variants, Tactics, and Impact > We analyze the technical details of a new ransomware family named Big Head. In this entry, we discuss the Big Head ransomware’s similarities and distinct markers that add more technical details to initial reports on the ransomware. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/tailing-big-head-ransomware-variants-tactics-and-impact Updated: 2026-10-15 Category: blog --- ## TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM > Moving beyond their LiteLLM campaign, TeamPCP weaponizes the Telnyx Python SDK with stealthy WAV‑based payloads to steal credentials across Linux, macOS, and Windows. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/teampcp-telnyx-attack-marks-a-shift-in-tactics Updated: 2026-08-18 Category: blog --- ## TeamTNT Activities Probed: Credential Theft, Cryptocurrency Mining, and More > Our research sheds light on the tools and techniques used by TeamTNT and the potential impact of the group’s sundry malicious activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/teamtnt-activities-probed Updated: 2026-08-07 Category: research --- ## Tech Services Company > [TrendAI™ Vision One™] provides us with centralized visibility and management across protection layers. It is critical to us. Without it, our staff has to work harder because we are in multiple dashboards, and we do not have a giant picture between the systems and the security layers. It allows us to defend that much better. URL: https://www.trendaisecurity.com/en-us/customer-stories/tech-services-co-sr-security-arch-peerstory Updated: 2026-09-11 Category: customerStory --- ## Technology, Media, and Communications > TrendAI™ delivers AI cybersecurity for tech, media, and communications, protecting cloud-native pipelines, 5G, and subscriber ecosystems. URL: https://www.trendaisecurity.com/en-us/solutions/tech-media-comms Updated: 2026-10-16 Category: solution --- ## Technoval > By locally hosting the[ TrendAI Vision One™] SPC platform, we are advancing Saudi Arabia’s Vision 2030 by embedding security at the heart of digital transformation. Our collaboration with Trend Micro and Google Cloud reinforces TechnoVal’s mission to deliver comprehensive, end-to-end solutions that meet the Kingdom’s evolving regulatory and operational needs. URL: https://www.trendaisecurity.com/en-us/customer-stories/technoval Updated: 2026-10-16 Category: customerStory --- ## Texas School District Loses $2.3 Million to Phishing Scam, BEC > A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/texas-school-district-loses-2-3-million-to-phishing-scam-bec Updated: 2026-09-30 Category: research --- ## The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP > Top news sites, entertainment portals, and political commentary sites were affected by a massive malvertising campaign related to the Angler Exploit Kit. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/malvertising-campaign-linked-to-angler-exploit-kit-and-bedep Updated: 2026-08-17 Category: research --- ## The Architecture Behind $1B: How Customers Run TrendAI Vision One™ on AWS, and Secure Their AI Workloads URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/the-architecture-behind-a-billion-dollars-how-customers-run-trendai-vision-one-on-aws-and-secure-their-ai-workloads Updated: 2026-08-27 Category: blog --- ## The Attackers Are Already Inside: NERC CIP-015 Is How the Grid Fights Back > NERC CIP-015 is the first NERC CIP standard to mandate internal network security monitoring for Bulk Electric System environments. Here is what it requires, why OT environments make compliance hard, and how TrendAI™ addresses each obligation. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-attackers-are-already-inside-nerc-cip-015-is-how-the-grid-fights-back Updated: 2026-08-11 Category: research --- ## The Basics of Keeping Kubernetes Cluster Secure: Worker Nodes and Related Components > We outline security mitigations and settings that should be prioritized in a clustered environment. The second part of our security guide on Kubernetes clusters covers best practices related to worker nodes, the kubelet, pods, and audit logs. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-basics-of-keeping-kubernetes-cluster-secure-worker-nodes-and-related-components Updated: 2026-10-02 Category: research --- ## The Basics of Keeping Kubernetes Clusters Secure > With Kubernetes’ popularity and high adoption rates, its security should always be prioritized. We provide vital tips and recommendations on keeping the master node, the API server, etcd, RBAC, and network policies secure. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-basics-of-keeping-your-kubernetes-cluster-secure-part-1 Updated: 2026-08-28 Category: research --- ## The Boardroom Debate: How Cyber Risk Hits Your Bottom Line > You don’t need to be an expert to use cyber risk quantification. TrendAI™ automates data collection to deliver real-time financial risk insights and clear next steps for remediation. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/the-boardroom-debate-how-cyber-risk-hits-your-bottom-line Updated: 2026-09-25 Category: blog --- ## The Crypto-Monetized Web: A Forward-Looking Thought Experiment > In past decades, we have seen how the web has drastically evolved. From the static, read-only version of Web 1.0, we have witnessed its transformation to its present mode — as the dynamic, interactive, and content creator-driven iteration that is Web 2.0. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-crypto-monetized-web-a-forward-looking-thought-experiment Updated: 2026-10-01 Category: research --- ## The Cybercriminal Underground: Mapping the Healthcare Data Economy > A look inside an industrialized economy where stolen healthcare data is bought, sold, and weaponized, from ransomware breaches to broker access and fake medical documents fueling an expanding criminal supply chain. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-cybercriminal-underground-mapping-the-healthcare-data-economy Updated: 2026-08-10 Category: research --- ## The Cybersecurity Blind Spots of Connected Cars > Connected cars face a range of ever-increasing and ever-progressing cyberthreats. Our forward-looking research provides an in-depth examination of the risks connected cars might run into. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-cybersecurity-blind-spots-of-connected-cars Updated: 2026-10-09 Category: research --- ## The Devil Reviews Xanthorox: A Criminal-Focused Analysis of the Latest Malicious LLM Offering > Xanthorox AI: flirty, menacing, and potentially devastating? We explored the inner workings of this LLM to unveil its devious capabilities for generating malicious code, obtaining private information, and roleplaying. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-devil-reviews-xanthorox-a-criminal-focused-analysis-of-the-latest-malicious-llm-offering Updated: 2026-08-05 Category: research --- ## The Enterprise Guide to Governing Autonomous AI Agents > In this report, we present the security and governance issues enterprises should consider when adopting and using AI agents. We lay out the risk structure unique to AI agents and present a security framework and a method for technical and organizational controls to support AI adoption. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-enterprise-guide-to-governing-autonomous-ai-agents Updated: 2026-10-08 Category: research --- ## The Ever-Evolving Threat of the Russian-Speaking Cybercriminal Underground > We dive into one of the most sophisticated and impactful ecosystems within the global cybercrime landscape. Our research looks at tools and techniques, specialized forums, popular services, plus a deeply ingrained culture of secrecy and collaboration. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-ever-evolving-threat-of-the-russian-speaking-cybercriminal-underground Updated: 2026-08-05 Category: research --- ## The Evolution of Windows Kernel Threats > In this report, we examine how these low-level threats have evolved through the years and discuss the three types of low-level threats that affect Windows systems. The categorization of more than 60 of the most noteworthy Windows low-level threats observed in the wild from 2015 to 2022 and where these threats stand in today’s threat landscape are discussed. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-evolution-of-windows-kernel-threats Updated: 2026-10-01 Category: research --- ## The Far-Reaching Attacks of the Void Balaur Cybermercenary Group > Our research paper takes a close look at the cybermercenary group Void Balaur's services, activities, and targets. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-far-reaching-attacks-of-the-void-balaur-cybermercenary-group Updated: 2026-08-05 Category: research --- ## The Future of Ransomware > Our research looks at the potential evolutions and revolutions in the current ransomware landscape based on significant triggers and catalysts. We highlight the specific developments (triggers) that could cause gradual changes (evolutions) before sparking more drastic transformations (revolutions). URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-future-of-ransomware Updated: 2026-08-05 Category: research --- ## The Future of Social Engineering > Social engineering is a tactic that, at its core, creates a false narrative to exploit a victim’s credulity, greed, curiosity, or any other very human characteristics. Attackers continue to enhance existing social engineering and use new technologies. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-future-of-social-engineering Updated: 2026-08-11 Category: research --- ## The Future of Whaling Attacks: AI-Powered Harpoon Whaling > This report discusses how malicious actors will be able to deploy harpoon whaling attacks, which are highly targeted whaling attacks on specific groups of powerful and high-ranking individuals, by abusing AI tools. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-future-of-whaling-attacks-ai-powered-harpoon-whaling Updated: 2026-09-28 Category: research --- ## The Gender-Equal Cybercriminal Underground > A look into the cybercriminal gender gap, the status and perceptions on gender profiles in the underground, and the role assumptions have for law enforcement. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/gender-in-cybercrime Updated: 2026-08-06 Category: research --- ## The Hidden Risk in Your AI Rollout: Your Endpoints > Rethink endpoint security for the AI era. Endpoints now converge users, identities, data, and AI, increasing risk from shadow AI and advanced attacks. This demands stronger visibility, correlation, and resilience. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-hidden-risk-in-your-ai-rollout-your-endpoints Updated: 2026-08-11 Category: research --- ## The IIoT Threat Landscape: Securing Connected Industries > As the use of IoT extends beyond the home and goes into the vast industrial landscape, the scale of threats likewise grows. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-iiot-threat-landscape-securing-connected-industries Updated: 2026-10-12 Category: research --- ## The Illusion of Choice: Uncovering Electoral Deceptions in the Age of AI > Elections are the cornerstone of modern democracy, an exercise where a populace expresses its political will through the casting of ballots. But as electoral systems adopt and embrace technology, this introduces significant cybersecurity risks, not only to the infrastructure supporting an election but also to the people lining up in polling booths. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-illusion-of-choice-uncovering-electoral-deceptions-in-the-age-of-ai Updated: 2026-08-18 Category: research --- ## The Industrialization of Botnets: Automation and Scale as a New Threat Infrastructure > Today’s botnet operations, enabled by automation and shared resources, are outpacing traditional response and patching models. This highlights the growing importance of security capabilities that can match the speed and scale of these attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-industrialization-of-botnets-automation-and-scale-as-a-new-threat-infrastructure Updated: 2026-08-05 Category: research --- ## The Mirage of AI Programming: Hallucinations and Code Integrity > The adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-mirage-of-ai-programming-hallucinations-and-code-integrity Updated: 2026-08-14 Category: research --- ## The Most Common Cloud Misconfigurations That Could Lead to Security Breaches > Using Trend Micro Cloud One™ – Conformity data, we looked at the top 10 Amazon Web Services (AWS) and Microsoft Azure services with the highest misconfiguration rates with regard to the implementation of Cloud Conformity rules. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-most-common-cloud-misconfigurations-that-could-lead-to-security-breaches Updated: 2026-08-05 Category: research --- ## The Next Phase of Cybercrime: Agentic AI and the Shift to Autonomous Criminal Operations > We dive into the transformation from “Cybercrime-as-a-Service“ to “Cybercrime-as-a-Sidekick“, which fundamentally alters the operational dynamics of criminal enterprises. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-next-phase-of-cybercrime-agentic-ai-and-the-shift-to-autonomous-criminal-operations Updated: 2026-08-05 Category: research --- ## The Nightmares of Patch Management: The Status Quo and Beyond > We discuss the challenges that organizations face in managing endpoint and server patches. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-nightmares-of-patch-management-the-status-quo-and-beyond Updated: 2026-08-22 Category: research --- ## The Realities of Quantum Machine Learning > Quantum machine learning (QML) is at the nexus of two very hyped topics: artificial intelligence and quantum computing. Ignoring the AI hype, let's explore how realistic quantum machine learning is. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-realities-of-quantum-machine-learning Updated: 2026-10-01 Category: research --- ## The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns > Trend™ Research examines the complex collaborative relationship between China-aligned APT groups via the new “Premier Pass-as-a-Service” model, exemplified by the recent activities of Earth Estries and Earth Naga. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/premier-pass-as-a-service Updated: 2026-08-27 Category: blog --- ## The Rise of Residential Proxies as a Cybercrime Enabler > This research discusses how residential proxies help cybercriminals bypass antifraud and IT security systems, and how vulnerabilities in the IoT supply chain are exploited where Android-based devices are shipped pre-infected. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-rise-of-residential-proxies-and-its-impact-on-cyber-risk-exposure-management Updated: 2026-08-05 Category: research --- ## The Road to Agentic AI: Defining a New Paradigm for Technology and Cybersecurity > Our latest research provides a framework for understanding agentic AI systems, outlines their core characteristics, and examines the security implications surrounding their use. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-road-to-agentic-ai-defining-a-new-paradigm-for-technology-and-cybersecurity Updated: 2026-08-05 Category: research --- ## The Road to Agentic AI: Navigating Architecture, Threats, and Solutions > As agentic AI systems grow increasingly complex, it becomes clear that this class of applications relies on a multi-layered architecture. Trying to chart such architecture reveals several security risks that could plague each layer. This article investigates the possible scenarios and offers actionable insights to secure each layer and combat such threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-road-to-agentic-ai-navigating-architecture-threats-and-solutions Updated: 2026-09-11 Category: research --- ## The Silent Leap: OpenAI’s New ChatGPT Agent Capabilities and Security Risks > OpenAI recently introduced ChatGPT agent. What are its capabilities and the associated cybersecurity risks? We examined these using Trend Micro’s Digital Assistant Framework to help organizations navigate the changes and risks this new digital assistant may bring. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-silent-leap-openais-new-chatgpt-agent-capabilities-and-security-risks Updated: 2026-08-05 Category: research --- ## The Speed of AI Is Changing the Vulnerability Landscape. Our Commitment to CISA KEV Isn’t. > AI is changing vulnerability discovery speed. See how TrendAI's CISA KEV focus and virtual patching keep enterprises protected before patches ship. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cisa-kev-commitment-ai-vulnerability-management Updated: 2026-09-15 Category: blog --- ## The State of Ransomware: 2020’s Catch-22 > Ransomware continues the trend of targeted attacks but with the added challenge of double extortion. Organizations need to be one step ahead of such coercive tactics to avoid potential disruptions, financial losses, and reputational damage. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-state-of-ransomware-2020-s-catch-22 Updated: 2026-08-06 Category: research --- ## The Transition to 5G: Security Implications of Campus Networks > The 4G/5G campus network demonstrates the growing role of telecom technologies in different industries. Organizations and IT/OT experts need to keep up with these changes and consider their security implications. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-transition-to-5g-security-implications-of-campus-networks Updated: 2026-10-07 Category: research --- ## The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables > An OAuth supply chain compromise at Vercel exposed how trusted third party apps and platform environment variables can bypass traditional defenses and amplify blast radius. This article examines the attack chain, underlying design tradeoffs, and what it reveals about modern PaaS and software supply chain risk. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/vercel-breach-oauth-supply-chain Updated: 2026-09-11 Category: blog --- ## The Vulnerability Window Is Closing Quickly: What CISA and Five Eyes Now Say About Public Sector Security > CISA's BOD 26-04 and a new Five Eyes statement highlight the same urgent gaps in vulnerability management. Find out what these developments mean for your security program. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-vulnerability-window-is-closing-quickly-what-cisa-and-five-eyes-now-say-about-public-sector-security Updated: 2026-08-07 Category: research --- ## Threat Actors Abuse Evernote, Other Shared Platforms for Credential Phishing > Threat actors use Evernote and other platforms such as Canva, Lucidpress, and Infogram as host pages for credential phishing. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/threat-actors-abuse-evernote-other-shared-platforms-for-credential-phishing Updated: 2026-10-07 Category: research --- ## Threat Actors Deliver Courier-Themed Spam Campaign with Attached ACE Files > Trend Micro researchers detected a new courier service themed malicious spam campaign that uses ACE files as attachments. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/threat-actors-deliver-courier-themed-spam-campaign-with-attached-ace-files Updated: 2026-10-07 Category: research --- ## Threat Attribution Framework: How TrendAI™ Applies Structure Over Speculation > TrendAI™ brings structure and discipline to threat attribution, helping security leaders and teams make informed decisions about cyber risk, incident response, and overall defensive posture. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/threat-attribution-framework-how-trendai-applies-structure-over-speculation Updated: 2026-08-05 Category: research --- ## Threat Intelligence > Stay ahead of AI-powered attacks with TrendAI Vision One™ Threat Intelligence: real-time insight from 450+ researchers and the TrendAI™ Zero Day Initiative™ (ZDI). URL: https://www.trendaisecurity.com/en-us/platform/threat-intelligence Updated: 2026-07-31 Category: platform --- ## Threat Modeling API Gateways: A New Target for Threat Actors? > In this article, we dive into API gateway functions and risks, the advantages of API gateways in hybrid and multi-cloud environments, and common API security risks and best practices. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/threat-modeling-api-gateways-a-new-target-for-threat-actors Updated: 2026-09-11 Category: research --- ## Threat Recap: Darkside, Crysis, Negasteal, Coinminer > Darkside ransomware surfaced, operators behind Crysis/Dharma released a hacking toolkit, a targeted email campaign was used to propagate Negasteal, and a coinminer was seen bundled with legitimate applications. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/threat-recap-darkside-crysis-negasteal-coinminer Updated: 2026-10-02 Category: research --- ## Threats and Consequences: A Security Analysis of Smart Manufacturing Systems > Through a thorough analysis of an actual smart manufacturing environment, our in-depth security research explores several attack vectors that could be used by threat actors to launch unconventional attacks on smart manufacturing systems. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/threats-and-consequences-a-security-analysis-of-smart-manufacturing-systems Updated: 2026-08-08 Category: research --- ## Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites > Our analysis of an active KongTuke campaign deploying modeloRAT — malware capable of reconnaissance, command execution, and persistent access — through compromised WordPress sites and fake CAPTCHA lures shows that the group still operates this delivery chain in parallel with the newer CrashFix technique. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/kongtuke-clickfix-abuse-of-compromised-wordpress-sites Updated: 2026-10-06 Category: blog --- ## TikTok Videos Promise Pirated Apps, Deliver Vidar and StealC Infostealers Instead > Trend™ Research uncovered a campaign on TikTok that uses videos to lure victims into downloading information stealers, a tactic that can be automated using AI tools. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/tiktok-videos-infostealers Updated: 2026-08-25 Category: blog --- ## TippingPoint > More than an Intrusion Prevention System (IPS), TrendAI™ TippingPoint™ Protection System integrates with TrendAI Vision One™. URL: https://www.trendaisecurity.com/en-us/platform/network-security/tipping-point Updated: 2026-10-16 Category: platform --- ## Today’s Cloud and Container Misconfigurations Are Tomorrow’s Critical Vulnerabilities > It’s projected that by 2027, more than 90% of global organizations will be running containerized applications, while 63% of enterprises already adopted a cloud-native strategy in their businesses in 2023. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/todays-cloud-and-container-misconfigurations-are-tomorrows-critical-vulnerabilities Updated: 2026-08-21 Category: research --- ## Tondo > [TrendAI™] has significantly streamlined our threat detection process, allowing our small team to efficiently manage security operations. URL: https://www.trendaisecurity.com/en-us/customer-stories/tondo Updated: 2026-09-11 Category: customerStory --- ## Town of Kill Devil Hills > Visibility is the biggest advantage of the platform. TrendAI™ collects telemetry from any device with an agent and has strong third-party integration capabilities. Instead of parsing data across platforms and interfaces, I get coherent insights straight from TrendAI Vision One’s dashboards. URL: https://www.trendaisecurity.com/en-us/customer-stories/town-of-kill-devil-hills Updated: 2026-09-28 Category: customerStory --- ## Tracking, Detecting, and Thwarting PowerShell-based Malware and Attacks > PowerShell's ubiquity has made it one of the most common tools cybercriminals abuse to perpetrate attacks and deliver fileless malware to systems. Here's how to track and defend against them. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/tracking-detecting-and-thwarting-powershell-based-malware-and-attacks Updated: 2026-08-05 Category: research --- ## Trading in the Dark > An Investigation into the Current Condition of Underground Markets and Cybercriminal Forums URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/trading-in-the-dark Updated: 2026-08-18 Category: research --- ## Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations > Enterprise 2025 introduces the first full cloud adversary emulation and expanded multi-platform testing. This year features two advanced threat focus areas: Scattered Spider’s cloud-centric attacks and Mustang Panda’s long-term espionage operations. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/cloud-automation-2025-mitre-attack-round-7 Updated: 2026-08-20 Category: blog --- ## TrendAI Vision One > Secure your enterprise for the AI age with TrendAI Vision One™. Eliminate cyber risk and stop AI-enabled attacks faster. URL: https://www.trendaisecurity.com/en-us/platform Updated: 2026-10-16 Category: platform --- ## TrendAI™ Advances Threat Hunting to Dynamic, Real-World Exploitation of AI Infrastructure > The new threat hunting component of the TrendAI™ agentic exploit-remediation engine, code name AESIR, extends visibility beyond vulnerability disclosure. Its first published investigation links over a year of honeypot data to the LF3 loader framework. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/trendai-advances-threat-hunting-to-dynamic-real-world-exploitation-of-ai-infrastructure Updated: 2026-08-27 Category: blog --- ## TrendAI™ Brings OpenAI's GPT Cyber Models Into the Race to Shrink Exposure Time to Zero > OpenAI’s GPT cyber models help TrendAI™ close the exposure window, from vulnerability to fix, faster than ever. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/trendai-brings-openai-daybreak-models-into-the-race-to-shrink-exposure-time-to-zero Updated: 2026-09-25 Category: blog --- ## TrendAI™ Deep Research URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research Updated: 2026-07-31 Category: resourceHub --- ## TrendAI™ Executive Briefing Center > Get the download on world class global threat intelligence from a cybersecurity c-suite perspective. URL: https://www.trendaisecurity.com/en-us/campaigns/executive-briefing-center Updated: 2026-09-24 Category: campaign --- ## TrendAI™ Intelligence Aids Law Enforcement Arrest of Tycoon 2FA Operators > The Singapore Police Force (SPF), working closely with Pakistan's National Cyber Crime Investigation Agency (NCCIA) and INTERPOL has arrested two individuals linked to Tycoon2FA, a phishing operation that served criminal customers across four continents. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/trendaitm-intelligence-aids-law-enforcement-arrest-of-tycoon-2fa-operators Updated: 2026-09-15 Category: blog --- ## TrendAI™ Security Blog URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog Updated: 2026-07-31 Category: resourceHub --- ## TrendAI™ and CleanDNS: From Blocking Attacker Infrastructure to Removing It From the Internet > TrendAI™ and CleanDNS have partnered to go beyond blocking malicious domains. Learn how we are actively dismantling the infrastructure that cybercriminals depend on and removing attacker domains from the internet before attacks reach their targets. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/trendai-and-cleandns-from-blocking-attacker-infrastructure-to-removing-it-from-the-internet Updated: 2026-08-11 Category: research --- ## Trends and Shifts in the Underground N-Day Exploit Market > Our two-year research provides insights into the life cycle of exploits, the types of exploit buyers and sellers, and the business models that are reshaping the underground exploit market. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/trends-and-shifts-in-the-underground-n-day-exploit-market Updated: 2026-08-11 Category: research --- ## Trickbot Spreads as DLL, Comes with Upgrades Targeting Windows 10 > New variants of notorious banking trojan Trickbot was distributed via DLL and had features that focus on Windows 10. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/trickbot-spreads-as-dll-comes-with-upgrades-targeting-windows-10 Updated: 2026-10-12 Category: research --- ## Trickbot, Emotet Use Text About Trump to Evade Detection > Trickbot and Emotet were concealed by using text from articles about #Trump and placing them in the file metadata. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/trickbot-emotet-use-text-about-trump-to-evade-detection Updated: 2026-10-12 Category: research --- ## U.S. Public Sector Under Siege > Discover why Government and Education must prioritize Cyber Risk Management. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/us-public-sector-under-siege Updated: 2026-08-19 Category: blog --- ## U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026 > Discover how TrendAI Vision One™ empowers government agencies and educational institutions with advanced visibility, intelligence, and automation to stay ahead of evolving public sector threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/us-public-sector-under-siege-threat-intelligence-for-q1-2026 Updated: 2026-08-19 Category: blog --- ## UK Power Facility Cyberattack Shutdown: What Critical-Infrastructure Operators and Defenders Need to Know > A reported cyberattack on a UK power-generation facility in July 2026 shows that even disruptions at a single site can raise broader questions about critical infrastructure resilience. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/uk-power-facility-cyberattack-shutdown-what-critical-infrastructure-operators-and-defenders-need-to-know Updated: 2026-09-17 Category: blog --- ## UNWIRED: Understanding the Unforeseen Risks in Evolving Communication Channels > This article outlines the strategic risks linked to the growth of natively connected internet of things (IoT) devices that operate outside traditional cybersecurity controls. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unwired-understanding-the-unforeseen-risks-in-evolving-communication-channels Updated: 2026-08-10 Category: research --- ## US Cities Exposed in Shodan > An in-depth analysis of Shodan data reveals how some of the biggest US cities fare in terms of exposed cyber assets, what this means in terms of security, and how home users and organizations can protect their data. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/us-cities-exposed-in-shodan Updated: 2026-08-06 Category: research --- ## Unchaining Blockchain Security Part 1: The Emerging Risks of Private Blockchains in Enterprises > Our report dives into the evolution and security of blockchains and how enterprises are increasingly adopting this technology in the forms of private and hybrid blockchains. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unchaining-blockchain-security-part-1-the-emerging-risks-of-private-blockchains-in-enterprises Updated: 2026-10-12 Category: research --- ## Unchaining Blockchain Security Part 3: Exploring the Threats Associated with Private Blockchain Adoption > Blockchain technology continues to be widely adopted by enterprises for its numerous benefits, and it has inevitably attracted the attention of malicious actors. The secure, decentralized nature of blockchain does present a challenge to cybercriminals, yet it is not immune to attacks. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unchaining-blockchain-security-part-3-exploring-the-threats-associated-with-private-blockchain-adoption Updated: 2026-09-15 Category: research --- ## Unconventional Attack Surfaces: Identity Replication via Employee Digital Twins > In this second installment of a series exploring emerging AI-driven attack surfaces, TrendAI™ Research focuses on employee digital twins: AI replicas of employees that create new vectors for identity compromise, data exfiltration, and persistent access. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unconventional-attack-surfaces-identity-replication-via-employee-digital-twins Updated: 2026-08-05 Category: research --- ## Uncover Cloud Attacks with Trend Vision One and CloudTrail > By 2025, Gartner has projected that over half of enterprises’ expenditure on software, infrastructure, business process services, and system infrastructure will be directed toward cloud-based solutions. We have seen this trend in enterprise spending both during and after the pandemic, on top of how fast companies are shifting to the cloud. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/uncover-cloud-attacks-with-trend-vision-one-and-cloudtrail Updated: 2026-10-12 Category: research --- ## Uncovering IoT Threats in the Cybercrime Underground > Understanding current and future threats to the internet of things (IoT) can help shape how we secure this technology that is increasingly becoming integral to today's world. What insights can be reaped from the cybercrime underground? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-internet-of-things-in-the-cybercrime-underground Updated: 2026-08-05 Category: research --- ## Uncovering Risks in Ordinary Places: A Look at the IoT Threat Landscape > As the IoT continues to become more integrated into enterprise and home spaces, the threat landscape also expands. We look at the most significant threats and vulnerabilities in IoT devices on the edge of the network, within the network itself. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/uncovering-risks-in-ordinary-places-a-look-at-the-iot-threat-landscape Updated: 2026-10-06 Category: research --- ## Uncovering Security Weak Spots in Industry 4.0 CNC Machines > The technological leaps of the Fourth Industrial Revolution may have made production machinery more efficient, but these have also put manufacturers in the crosshairs of cybercriminals. Our research tackles the risks that computer numerical control (CNC) machines now face as they’re integrated into today’s networked factories. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/uncovering-security-weak-spots-in-industry-4-0-cnc-machines Updated: 2026-08-17 Category: research --- ## Uncovering Silent Threats in Azure Machine Learning Service: Part 2 > In our previous entry, we examined how credentials were being stored and logged in cleartext on compute instances (CIs) created in Azure Machine Learning (AML) service and the risks posed by the same. This article examines an information disclosure bug we found in one of the cloud agents used in the AML service and sheds light on the importance of threat modeling the agents’ features to uncover silent and hidden attack surfaces. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/uncovering-silent-threats-in-azure-machine-learning-service-part-2 Updated: 2026-09-17 Category: research --- ## Uncovering Silent Threats in Azure Machine Learning Service: Part I > We probed the Azure Machine Learning (AML) service to identify security flaws and vulnerabilities and shed light on the unseen aspects of silent threats in managed services like AML. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/uncovering-silent-threats-in-azure-machine-learning-service-part-I Updated: 2026-09-18 Category: research --- ## Understanding Hacktivists: The Overlap of Ideology and Cybercrime > Hacktivist groups are driven by a political or ideological agenda. In the past, their actions were likened to symbolic, digital graffiti. Nowadays, hacktivist groups resemble urban gangs. Previously composed of low-skilled individuals, these groups have evolved into medium- to high-skill teams, often smaller in size but far more capable. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/understanding-hacktivists-the-overlap-of-ideology-and-cybercrime Updated: 2026-08-05 Category: research --- ## Understanding Ransomware Using Data Science > Our research paper shows how decision-makers that are in a position to affect ransomware at scale – including policy-makers and industry leaders – can use data-science approaches to understand ransomware risk holistically and build cybersecurity strategies that can affect the ransomware ecosystem as a whole. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/understanding-ransomware-using-data-science Updated: 2026-10-01 Category: research --- ## Understanding the Kubernetes Security Triad: Image Scanning, Admission Controllers, and Runtime Security > Kubernetes, also known as K8s, is a very complex open-source platform that requires detailed attention to security. Despite previous efforts to increase its security, Kubernetes remains insecure by default and requires different security tools to protect the cluster. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/understanding-the-kubernetes-security-triad-image-scanning-admission-controllers-and-runtime-security Updated: 2026-09-16 Category: research --- ## Undertaking Security Challenges in Hybrid Cloud Environments > As organizations make their move toward a more efficient and innovative future in the cloud, hybrid cloud environments pose several problems that can make or break their overall strategies. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/undertaking-security-challenges-in-hybrid-cloud-environments Updated: 2026-10-02 Category: research --- ## Unleashing Chaos: Real World Threats Hidden in the DevOps Minefield > Threat actors are actively looking for exposed .env files. These files have become ticking bombs deeply rooted inside DevOps practices. Our research paper uncovers the hidden dangers in DevOps using real-world examples. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/real-world-threats-hidden-in-devops Updated: 2026-08-11 Category: research --- ## Unmasking Pig-Butchering Scams and Protecting Your Financial Future > This report delves into the nature of pig-butchering scams, how scammers carry out their operations, the new pig-butchering tactics we’ve observed in the wild, and what individuals can do to avoid falling for these fraudulent investments and dealing with massive amounts of debt. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unmasking-pig-butchering-scams-and-protecting-your-financial-future Updated: 2026-08-05 Category: research --- ## Unmasking Task Scams to Prevent Financial Fallout From Fraud > This report exposes the life cycle and tactics of task scams by presenting real-world cases as well as strategies to help identify and avoid these threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unmasking-task-scams-to-prevent-financial-fallout-from-fraud Updated: 2026-08-05 Category: research --- ## Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed > An analysis of the Gentlemen ransomware group, which employs advanced, adaptive tactics, techniques, and procedure to target critical industries worldwide. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/unmasking-the-gentlemen-ransomware Updated: 2026-08-27 Category: blog --- ## Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp > Through AI-driven code conversion and a layered infection chain involving different file formats and scripting languages, the threat actors behind Water Saci are quickly upgrading their malware delivery and propagation methods across WhatsApp in Brazil. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/water-saci Updated: 2026-08-20 Category: blog --- ## Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers > An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII). URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unsecured-aws-s3-bucket-found-leaking-data-of-over-30k-cannabis-dispensary-customers Updated: 2026-08-17 Category: research --- ## Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company > An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unusual-ceo-fraud-via-deepfake-audio-steals-us-243-000-from-u-k-company Updated: 2026-08-05 Category: research --- ## Unveiling AI Agent Vulnerabilities Part I: Introduction to AI Agent Vulnerabilities > This introductory post kicks off a blog series on AI agent vulnerabilities, outlining key security risks like prompt injection and code execution, and sets the stage for future parts, which will dive deeper into issues such as code execution flaws, data exfiltration, and database access threats. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unveiling-ai-agent-vulnerabilities-part-i-introduction-to-ai-agent-vulnerabilities Updated: 2026-08-06 Category: research --- ## Unveiling AI Agent Vulnerabilities Part II: Code Execution > Our research examines vulnerabilities that affect Large Language Model (LLM) powered agents with code execution, document upload, and internet access capabilities. This is the second part of a series diving into the critical vulnerabilities in AI agents. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unveiling-ai-agent-vulnerabilities-code-execution Updated: 2026-08-06 Category: research --- ## Unveiling AI Agent Vulnerabilities Part III: Data Exfiltration > In the third part of our series we demonstrate how risk intensifies in multi-modal AI agents, where hidden instructions embedded within innocuous-looking images or documents can trigger sensitive data exfiltration without any user interaction. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unveiling-ai-agent-vulnerabilities-part-iii-data-exfiltration Updated: 2026-08-06 Category: research --- ## Unveiling AI Agent Vulnerabilities Part IV: Database Access Vulnerabilities > How can attackers exploit weaknesses in database-enabled AI agents? This research explores how SQL generation vulnerabilities, stored prompt injection, and vector store poisoning can be weaponized by attackers for fraudulent activities. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unveiling-ai-agent-vulnerabilities-part-iv-database-access-vulnerabilities Updated: 2026-08-06 Category: research --- ## Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services > To conclude our series on agentic AI, this article examines emerging vulnerabilities that threaten AI agents, focusing on providing proactive security recommendations on areas such as code execution, data exfiltration, and database access. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unveiling-ai-agent-vulnerabilities-part-v-securing-llm-services Updated: 2026-08-06 Category: research --- ## Unveiling the Hidden Risks of Industrial Automation Programming > The legacy programming environments of widely used industrial machines could harbor virtually undetectable vulnerabilities and malware. Our security analysis of these environments reveals critical flaws and their repercussions for smart factories. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/unveiling-the-hidden-risks-of-industrial-automation-programming Updated: 2026-08-10 Category: research --- ## Update on Exposed MCP Servers: The Threat Widens to the Cloud > Exposed Model Context Protocol (MCP) servers have become powerful vectors for cloud attacks, enabling threat actors to not only access sensitive data but also take control of the cloud services themselves. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/update-on-exposed-mcp-servers-the-threat-widens-to-the-cloud Updated: 2026-09-22 Category: research --- ## Updated Analysis on Nefilim Ransomware’s Behavior > Through investigation of recent cases, we have amassed more information on how Nefilim ransomware operates. Some notable updates are the use of other tools and the description of events that occur within the attack phases. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/updated-analysis-on-nefilim-ransomware-s-behavior Updated: 2026-10-08 Category: research --- ## Updated Shadowpad Malware Leads to Ransomware Deployment > In this blog entry, we discuss how Shadowpad is being used to deploy a new undetected ransomware family. Attackers deploy the malware by exploiting weak passwords and bypassing multi-factor authentication. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/updated-shadowpad-malware-leads-to-ransomware-deployment Updated: 2026-10-06 Category: blog --- ## Using Containers to Secure Your MCP Infrastructure > Security risks to MCP servers can be mitigated by running them within containers. This report discusses these security risks and how MCP containerization can implement least privilege in practice. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/using-containers-to-secure-your-mcp-infrastructure Updated: 2026-08-09 Category: research --- ## Using Custom Containers in Serverless Environments for Better Security > After looking at offerings by cloud service providers (CSPs), we examined the possibilities of using a more secure serverless environment by running a custom container. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/using-custom-containers-in-serverless-environments-for-better-security Updated: 2026-10-01 Category: research --- ## Using MITRE ATT&CK to Identify an APT Attack > We analyzed the tools, relationships, and behaviors used in a long-standing intrusion of a company after its security team observed malicious C&C traffic. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/using-mitre-att-ck-to-identify-an-apt-attack Updated: 2026-10-02 Category: research --- ## Viral AI, Invisible Risks: What OpenClaw Reveals About Agentic Assistants > OpenClaw (aka Clawdbot or Moltbot) represents a new frontier in agentic AI: powerful, highly autonomous, and surprisingly easy to use. In this research, we examine how its capabilities compare to its predecessors’ and highlight the security risks inherent to the agentic AI paradigm. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/what-openclaw-reveals-about-agentic-assistants Updated: 2026-08-27 Category: blog --- ## Vodafone > [TrendAI Vision One™] successfully detected and blocked all threats, including malicious files, scripts, and even dormant scripts that later became active. URL: https://www.trendaisecurity.com/en-us/customer-stories/vodafone-cloud-cybersecurity-tech-lead-peerstory Updated: 2026-09-10 Category: customerStory --- ## Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware > Warlock ransomware exploits unpatched Microsoft SharePoint vulnerabilities to gain access, escalate privileges, steal credentials, move laterally, and deploy ransomware with data exfiltration across enterprise environments. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/warlock-ransomware Updated: 2026-08-27 Category: blog --- ## Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware > TrendAI™ Research provides a technical analysis of a compromised EmEditor installer used to deliver multistage malware that performs a range of malicious actions. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/watering-hole-attack-targets-emeditor-users Updated: 2026-08-28 Category: blog --- ## Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads > A packaging error in Anthropic’s Claude Code npm release briefly exposed internal source code. This entry examines how threat actors rapidly weaponized the resulting attention, pivoting an existing AI-themed campaign to spread Vidar and GhostSocks. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/weaponizing-trust-claude-code-lures-and-github-release-payloads Updated: 2026-08-19 Category: blog --- ## Weatherford ISD > TrendAI™ has become part of our team, making sure we’re comfortable with the tools and they’re deployed properly. Without Trend’s support, the tools would not be as effective as they are today. URL: https://www.trendaisecurity.com/en-us/customer-stories/weatherford-independent-school-district Updated: 2026-09-28 Category: customerStory --- ## Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack > Warlock continues to enhance its attack chain with new tactics to improve persistence, lateral movement, and defense evasion using an expanded toolset: TightVNC Yuze, and a persistent BYOVD technique leveraging the NSec driver. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/dissecting-a-warlock-attack Updated: 2026-08-27 Category: blog --- ## Web Skimming Attack on Blue Bear Affects School Admin Software Users > A web skimming attack was used to target a school administration software that handles school accounting, student fees, and online stores for K-12 and other educational institutions. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/web-skimming-attack-on-blue-bear-affects-school-admin-software-users Updated: 2026-09-30 Category: research --- ## What Cybercriminals Look For in Corporate Insiders > The supply and demand for insider threat actors have evolved from isolated opportunism into a structured, thriving criminal market, complete with brokers, recruiters, referral bonuses, guarantor services, and revenue-sharing arrangements. This research examines that market across different industries. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/what-cybercriminals-look-for-in-corporate-insiders Updated: 2026-08-08 Category: research --- ## What We Know About the NPM Supply Chain Attack > TrendAI™ Research outlines the critical details behind the ongoing NPM supply chain attack and offers essential steps to stay protected against potential compromise. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/npm-supply-chain-attack Updated: 2026-08-18 Category: blog --- ## What You Need to Know About the LockerGoga Ransomware > The systems of Norsk Hydro were reportedly struck by LockerGoga ransomware. Here's what you need to know about this threat and how to defend against it. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/what-you-need-to-know-about-the-lockergoga-ransomware Updated: 2026-08-05 Category: research --- ## What do Hackers do with Your Stolen Identity? > Identity theft is currently a gold mine for cybercriminals—one that reached an all-time high in 2016, with up to $16 billion worth of losses caused by fraud and identity theft. But what exactly happens with the stolen information? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/what-do-hackers-do-with-your-stolen-identity Updated: 2026-08-05 Category: research --- ## When Tokenizers Drift: Hidden Costs and Security Risks in LLM Deployments > A tokenizer lies at the core of every large language model. When it drifts, whether from unseen flaws or adversarial interference, costs rise and performance drops. We explore this emerging risk, its implications, and the measures to prevent it. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/when-tokenizers-drift-hidden-costs-and-security-risks-in-llm-deployments Updated: 2026-09-21 Category: blog --- ## When Trust in AI Becomes an Attack Surface: Analyzing Prompt Injection, Model Theft, and Pipeline Poisoning > Our analysis shows how AI attacks are moving beyond malicious prompts into the tools, models, and pipelines organizations already trust, and the controls organizations can put in place to reduce their exposure. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/when-trust-in-ai-becomes-an-attack-surface-analyzing-prompt-injection-model-theft-and-pipeline-poisoning Updated: 2026-09-28 Category: blog --- ## Why Quantum Computing Discussions Can No Longer Be Ignored > We are at the dawn of a new era in computing, one based on the principles of quantum mechanics. Quantum mechanics deals with the smallest particles in our universe, the building blocks of atoms, that form the materials of our physical world. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/why-quantum-computing-discussions-can-no-longer-be-ignored Updated: 2026-10-12 Category: research --- ## Why TrendAI > Manage risk, not tools. See how TrendAI™ reduces complexity, improves ROI, and helps secure your AI journey. URL: https://www.trendaisecurity.com/en-us/why-trendai Updated: 2026-10-16 Category: about --- ## Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility > TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/open-secure-ai-alliance Updated: 2026-09-21 Category: blog --- ## WordPress GDPR Plugin Vulnerable to Cross-Site Scripting Attacks > A WordPress GDPR plugin for managing cookies exposed sites to a vulnerability that allowed privilege escalation. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/wordpress-gdpr-plugin-vulnerable-to-cross-site-scripting-attack Updated: 2026-10-12 Category: research --- ## Working From Home? Here’s What You Need for a Secure Setup > There has been an influx of employees signing in remotely to corporate networks and using cloud-based applications. But this shift could also open doors to security risks. Where should security fit in? URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/working-from-home-here-s-what-you-need-for-a-secure-setup Updated: 2026-08-14 Category: research --- ## Workload Security > TrendAI Vision One™ Cloud Security provides an all-encompassing cloud workload security solution to protect your data center, cloud, and containers without compromising performance or security. URL: https://www.trendaisecurity.com/en-us/platform/endpoint-security/workload-security Updated: 2026-10-16 Category: platform --- ## World Backup Day: What, When, Where and Why You Need to Back up and How to do it > Observe World Backup Day by learning why you should back up, what to back up, where to store them, when you should do it, and how to do it. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/world-backup-day-what-when-where-and-why-you-need-to-backup-and-how-to-do-it Updated: 2026-08-14 Category: research --- ## XCSSET Mac Malware: Infects Xcode Projects, Uses 0Days > Further investigation led us to a developer’s Xcode project that contained XCSSET source malware, which leads to a rabbit hole of malicious payloads. Most notable in our investigation is the discovery of two zero-day exploits. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/xcsset-mac-malware--infects-xcode-projects--uses-0-days Updated: 2026-08-14 Category: blog --- ## Xsolis > TrendAI™ has allowed us to sleep at night knowing that its security solutions are running 24/7. Companies that don’t take security seriously and invest wisely are taking on a much higher risk. URL: https://www.trendaisecurity.com/en-us/customer-stories/xsolis Updated: 2026-09-11 Category: customerStory --- ## Xsolis ESG > Speed and innovation are core to my success formula, but so is the ability to manage risk without slowing down the business. URL: https://www.trendaisecurity.com/en-us/customer-stories/xsolis-esg Updated: 2026-07-10 Category: customerStory --- ## You Can't See Me: Achieving Stealthy Persistence in Azure Machine Learning > In the latest installment of our ongoing series where we identify and investigate security flaws in Azure Machine Learning (AML), we explore how cybercriminals could manage to covertly gain persistence in AML workspaces. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/you-cant-see-me-achieving-stealthy-persistence-in-azure-machine-learning Updated: 2026-10-01 Category: research --- ## Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise > TeamPCP orchestrated one of the most sophisticated multi-ecosystem supply chain campaigns publicly documented to date. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/inside-litellm-supply-chain-compromise Updated: 2026-08-19 Category: blog --- ## Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach > Litellm PyPI breach explained: malicious versions steal cloud credentials, SSH keys, and Kubernetes secrets. Learn impact and urgent mitigation steps. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/your-ai-stack-just-handed-over-your-root-keys-inside-the-litellm-pypi-breach Updated: 2026-08-27 Category: blog --- ## Your Stolen Data for Sale > In today’s rapidly evolving digital landscape, the risk of personal and professional data being stolen by nefarious actors looms larger than ever. This report lays bare the stark reality of this threat, with a specific focus on the unequal risks associated with data theft and its subsequent misuse. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/your-stolen-data-for-sale Updated: 2026-08-14 Category: research --- ## Youtube, Twitter Hunt Down Deepfakes > In a quest to clamp down on synthetic and manipulated media, Youtube and Twitter ban deepfakes. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/youtube-twitter-hunt-down-deepfakes Updated: 2026-10-08 Category: research --- ## ZDI-CAN-25373: Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns > Trend Zero Day Initiative™ (ZDI) uncovered both state-sponsored and cybercriminal groups extensively exploiting ZDI-CAN-25373 (aka ZDI-25-148), a Windows .lnk file vulnerability that enables hidden command execution. URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/windows-shortcut-zero-day-exploit Updated: 2026-09-11 Category: blog --- ## Zero Breaches Out of 50: TrendAI Vision One™ Endpoint Security Essentials Earns AV-Comparatives Certified Leader Status URL: https://www.trendaisecurity.com/en-us/resources-insights/trendai-security-blog/zero-breaches-out-of-50-trendaitm-vision-onetm-endpoint-security-essentials-earns-av-comparatives-certified-leader-status Updated: 2026-09-25 Category: blog --- ## Zero Day Initiative (ZDI) > Learn about Trend Zero Day Initiative's (ZDI) mission, which was started in 2005 to encourage the reporting of 0-day vulnerabilities privately to affected vendors. URL: https://www.trendaisecurity.com/en-us/threat-research/zero-day-initiative Updated: 2026-10-16 Category: about --- ## Zero Trust Secure Access > Continuously verify and assess each identity and device across the entire digital estate through our SSE solution. Bridge the gap between generative AI (GenAI) services and secure access. URL: https://www.trendaisecurity.com/en-us/platform/network-security/zero-trust-secure-access Updated: 2026-10-16 Category: platform --- ## Zero Trust: Enforcing Business Risk Reduction Through Security Risk Reduction > Unlike traditional legacy trust models where security is not always present in all cases, Zero Trust revolves around an ”always-on everywhere” approach. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/zero-trust-enforcing-business-risk-reduction-through-security-risk-reduction Updated: 2026-09-17 Category: research --- ## Zloader Campaigns at a Glance > Our infographic provides a quick and comprehensive overview of Zloader, which has been involved in numerous campaigns over the past few years. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/zloader-campaigns-at-a-glance Updated: 2026-09-28 Category: research --- ## vs. CrowdStrike > See why customers choose TrendAI Vision One™ over Crowdstrike Falcon to stops threats faster and help you take control of your cyber risks with a single platform URL: https://www.trendaisecurity.com/en-us/compare/trendai-vs-crowdstrike Updated: 2026-10-16 Category: compare --- ## vs. Microsoft > See why customers choose TrendAI Vision One™ over Microsoft Defender to stops threats faster and help you take control of your cyber risks with a single platform URL: https://www.trendaisecurity.com/en-us/compare/trendai-vs-microsoft Updated: 2026-10-16 Category: about --- ## vs. Palo Alto > See why customers choose TrendAI Vision One™ over Palo Alto Prisma to stops threats faster and help you take control of your cyber risks with a single platform URL: https://www.trendaisecurity.com/en-us/compare/trendai-vs-palo-alto Updated: 2026-10-16 Category: compare --- ## vs. SentinelOne > See TrendAI™ vs SentinelOne compared a point-by-point on this page. URL: https://www.trendaisecurity.com/en-us/compare/trendai-vs-sentinel-one Updated: 2026-10-16 Category: compare --- ## “Twin Flower” Campaign Jacks Up Network Traffic, Downloads Files, Steals Data > Researchers detected the “Twin Flower” campaign that simulates increased clicks to boost network traffic, boosting SEO ranking and advertising revenue. URL: https://www.trendaisecurity.com/en-us/resources-insights/deep-research/twin-flower-campaign-jacks-up-network-traffic-downloads-files-steals-data Updated: 2026-10-06 Category: research ---