AIExploits & Zero-Days
Zero Breaches Out of 50: TrendAI Vision One™ Endpoint Security Essentials Earns AV-Comparatives Certified Leader Status
15 de setembro de 2026Jay Yaneza
15 de setembro de 2026 Read article
TrendAI™
Blog de Segurança
Blogs em Destaque
Financial servicesHealthcare & life sciencesTechnology, media, & communications
The Boardroom Debate: How Cyber Risk Hits Your Bottom Line
You don’t need to be an expert to use cyber risk quantification. TrendAI™ automates data collection to deliver real-time financial risk insights and clear next steps for remediation.
11 de setembro de 2026
Read article
AI
TrendAI™ Brings OpenAI's GPT Cyber Models Into the Race to Shrink Exposure Time to Zero
OpenAI’s GPT cyber models help TrendAI™ close the exposure window, from vulnerability to fix, faster than ever.
3 de setembro de 2026
Read article
ATF Reports Breach After Qilin Leak Site Appearance: Insights from TrendAI™
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has reportedly appeared on the Qilin ransomware group’s leak site. Explore how Qilin operates and what organizations can learn from its past tactics.
28 de agosto de 2026
Read article
Pesquisar por artigos de pesquisa
Site search
Filter by:
Malware
Living Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains
In this blog entry, researchers at TrendAI Vision One™ Services – Managed Detection and Response (MDR) walk through how attackers deliver, install, and operate a reconfigured ScreenConnect client, and why it slips past defenses built to catch conventional malware.
August 17th, 2026 15 min read
15 min read
Read Article
Phishing & BEC
How AiTM Phishing Bypassed MFA to Hijack a Microsoft 365 Mailbox in BEC Scheme
One click on a targeted lure handed an attacker live Microsoft 365 session tokens, enough to impersonate a vendor and reroute payments. TrendAI Vision One™ Services – Managed Detection and Response (MDR) tracks the attack to its root cause.
August 14th, 2026 20 min read
Read Article
AIExploits & Zero-Days
A velocidade da IA está mudando o cenário de vulnerabilidades. Nosso compromisso com o CISA KEV não está.
O TrendAI™ está aprofundando seu foco no Catálogo CISA KEV como um sinal comprovado de risco ativo. Com IA, o TrendAI™ combina a pesquisa ZDI do TrendAI™, inteligência de exploração, contexto de exposição e risco de negócios para impulsionar a priorização contínua assistida por IA, ajudando as equipes de segurança a tomarem melhores decisões e agirem mais rapidamente.
August 6th, 2026 5 min read
Read Article
Exploits & Zero-Days
How TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow
TrendAI™ Research uncovered an open redirect in Dify's post-login flow that could have handed a freshly authenticated session, token and all, to an attacker, and worked with the vendor to close it across every sign-in path before the details went public.
August 4th, 2026
Read Article
Cyber crime
TrendAI™ Intelligence Aids Law Enforcement Arrest of Tycoon 2FA Operators
The Singapore Police Force (SPF), working closely with Pakistan's National Cyber Crime Investigation Agency (NCCIA) and INTERPOL has arrested two individuals linked to Tycoon2FA, a phishing operation that served criminal customers across four continents.
August 4th, 2026
Read Article
OT & critical infrastructureMFA & authentication
Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know
Disruption reported across at least seven states, from equipment left accessible online. The issue is largely a matter of configuration and access control, and here's what to fix first.
August 3rd, 2026 5 min read
Read Article
AI
Por que a Open Secure AI Alliance é Importante: Modelos de Fronteira Abertos, Flexibilidade de Implantação Aberta
TrendAI se junta à Nvidia como parceiro inaugural na Open Secure AI Alliance, avançando em modelos abertos, ferramentas e pesquisas para fortalecer a defesa cibernética.
July 30th, 2026
Read Article
AICyber threats
Dentro do Incidente OpenAI – Hugging Face: A Violação de IA Sem Atacante Humano Por Trás
Os próprios modelos da OpenAI saíram de um ambiente de teste e invadiram os servidores da Hugging Face para resolver uma avaliação, sem a participação de um atacante humano. O incidente mostrou que manter a segurança da IA agente agora depende de como ela é contida, não apenas de como é treinada.
July 23rd, 2026 8 min read
Read Article
Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet
47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw.
June 1st, 2026 10 min read
Read Article
AI
The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables
An OAuth supply chain compromise at Vercel exposed how trusted third party apps and platform environment variables can bypass traditional defenses and amplify blast radius. This article examines the attack chain, underlying design tradeoffs, and what it reveals about modern PaaS and software supply chain risk.
April 20th, 2026 29 min read
Read Article