A reported cyberattack on a UK power-generation facility in July 2026 shows that even disruptions at a single site can raise broader questions about critical infrastructure resilience.
TrendAI™ Research provides a comprehensive analysis of the RedC2 Linux Implant, a sophisticated threat recently discovered in the npm open-source ecosystem.
In this blog entry, researchers at TrendAI Vision One™ Services – Managed Detection and Response (MDR) walk through how attackers deliver, install, and operate a reconfigured ScreenConnect client, and why it slips past defenses built to catch conventional malware.
A tokenizer lies at the core of every large language model. When it drifts, whether from unseen flaws or adversarial interference, costs rise and performance drops. We explore this emerging risk, its implications, and the measures to prevent it.
TrendAI™ Research examines the latest version of the Vidar stealer, which features a full rewrite in C, a multithreaded architecture, and several enhancements that warrant attention. Its timely evolution suggests that Vidar is positioning itself to occupy the space left after Lumma Stealer’s decline.
A targeted underground doxxing campaign exposed alleged core members of Lumma Stealer (Water Kurita), resulting in a sharp decline in its activity and a migration of customers to rival infostealer platforms.
Trend™ Research has uncovered an attack campaign exploiting the Cisco SNMP vulnerability CVE-2025-20352, allowing remote code execution and rootkit deployment on unprotected devices, with impacts observed on Cisco 9400, 9300, and legacy 3750G series.
The Trend Zero Day Initiative™ (ZDI) and Trend™ Research teams have identified a large-scale RondoDox botnet campaign exploiting over 50 vulnerabilities across more than 30 vendors, including flaws first seen in Pwn2Own contests.
A TrendAI™ Research identificou uma campanha ativa se espalhando via WhatsApp através de um anexo de arquivo ZIP. Quando executado, o malware estabelece persistência e sequestra a conta do WhatsApp comprometida para enviar cópias de si mesmo para os contatos da vítima.
A TrendAI™ Research analisou binários de origem da atividade mais recente do notório Ransomware LockBit com sua versão 5.0, que exibe técnicas avançadas de ofuscação, anti-análise e capacidades multiplataforma perfeitas para sistemas Windows, Linux e ESXi.
TrendAI™ Research outlines the critical details behind the ongoing NPM supply chain attack and offers essential steps to stay protected against potential compromise.
Combinando código gerado por IA e engenharia social, os operadores do EvilAI estão executando uma campanha em rápida expansão, disfarçando seu malware como aplicativos legítimos para contornar a segurança, roubar credenciais e comprometer persistentemente organizações em todo o mundo.
An analysis of the Gentlemen ransomware group, which employs advanced, adaptive tactics, techniques, and procedure to target critical industries worldwide.
August 24th, 2026 
6 min read
