Cyber propagandaGenerative AI
Matryoshka Returns, Targeting US Midterm Candidates With AI-Generated Fake Claims
2 listopada 20262 min read
Asako Koizumi, Philippe Lin
2 listopada 2026
2 min read
Read article
TrendAI™
Blog o bezpieczeństwie
Polecane blogi
BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
2 listopada 2026 15 min
Read article
Virtual Patching: Protect Sooner, Before the Patch Lands
1 listopada 2026
Read article
Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
28 października 2026 6 min
Read article
Wyszukaj artykuły
Site search
Filter by:
Cyber risk
Exploiting DeepSeek-R1: Breaking Down Chain of Thought Security
This entry explores how the Chain of Thought reasoning in the DeepSeek-R1 AI model can be susceptible to prompt attacks, insecure output generation, and sensitive data theft.
March 4th, 2025 5 min read
Read Article
Ransomware & extortion
Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal
In this blog entry, we discuss how the Black Basta and Cactus ransomware groups utilized the BackConnect malware to maintain persistent control and exfiltrate sensitive data from compromised machines.
March 3rd, 2025 12 min read
Read Article
AICloud security
AI in the Crosshairs: Understanding and Detecting Attacks on AWS AI Services with Trend Vision One™
This article offers a fresh perspective on AI security, emphasizing that while core AI models are often the focus, the surrounding infrastructure and cloud services are equally critical to securing AI applications, particularly with the rise of AI-as-a-Service.
February 27th, 2025 22 min read
Read Article
Updated Shadowpad Malware Leads to Ransomware Deployment
In this blog entry, we discuss how Shadowpad is being used to deploy a new undetected ransomware family. Attackers deploy the malware by exploiting weak passwords and bypassing multi-factor authentication.
February 20th, 2025 12 min read
Read Article
Malware
Earth Preta Mixes Legitimate and Malicious Components to Sidestep Detection
Our Threat Hunting team discusses Earth Preta’s latest technique, in which the APT group leverages MAVInject and Setup Factory to deploy payloads, and maintain control over compromised systems.
February 18th, 2025 6 min read
Read Article
AI
CES 2025: A Comprehensive Look at AI Digital Assistants and Their Security Risks
In this entry, we mapped the capabilities of various AI digital assistants that were showcased at CES 2025 based on an assessment matrix we developed to determine how this emerging technology holds up against potential security threats.
February 10th, 2025 12 min read
Read Article
Malware
Chinese-Speaking Group Manipulates SEO with BadIIS
This blog post details our analysis of an SEO manipulation campaign targeting Asia. We also share recommendations that can help enterprises proactively secure their environment.
February 7th, 2025 5 min read
Read Article
Exploits & Zero-Days
CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks
The Trend ZDI team offers an analysis on how CVE-2025-0411, a zero-day vulnerability in 7-Zip, was actively exploited to target Ukrainian organizations in a SmokeLoader campaign involving homoglyph attacks.
February 4th, 2025 12 min read
Read Article
Cyber threats
Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response
The Managed XDR team investigated a sophisticated campaign distributing Lumma Stealer through GitHub, where attackers leveraged the platform's release infrastructure to deliver malware such as SectopRAT, Vidar, and Cobeacon.
January 30th, 2025 16 min read
Read Article
Invisible Prompt Injection: A Threat to AI Security
This article explains the invisible prompt injection, including how it works, an attack scenario, and how users can protect themselves.
January 22nd, 2025 4 min read
Read Article