Skip to main content

TrendAI™ 深入研究

火花

Featured Articles

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation
AIOT & critical infrastructure

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation

The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.

2026年9月16日TrendAI™ Research
Read article
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
IoT & smart devicesASM ASRM
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data

China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.

2026年9月10日 6 min
Fyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article
An industrial worker inspecting a warehouse
HacktivismRansomware & extortion
Mapping the Criminal Economy Targeting Critical Infrastructure

TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.

2026年9月2日 7 min
Mayra Rosario Fuentes, Stephen Hilt, Numaan Huq
Read article
Security 101: Virtual Patching
Exploits & Zero-Days
Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

2026年8月25日 5 min
TrendAI™ Research
Read article

Search for research articles

Cloud security
Exposed Container Registries: A Potential Vector for Supply-Chain Attacks

In this entry, we will discuss publicly exposed registries, which are repositories or databases containing information accessible to the public without the need for authentication.

September 26th, 2023 12 min read Alfredo Oliveira , David Fiser
Read Article
By The NumbersRansomware & extortion
LockBit, BlackCat, and Clop Prevail as Top RAAS Groups: Ransomware in 1H 2023

We delve into three of the most active ransomware families that dominated the first half of 2023: LockBit, Clop, and BlackCat. This report features data from ransomware-as-a-service (RaaS) and extortion groups’ leak sites, Trend Micro’s open-source intelligence (OSINT) research, and the Trend Micro™ Smart Protection Network™, collected from Jan. 1 to June 30, 2023.

September 21st, 2023 TrendAI™ Research
Read Article
Diving Deep Into Quantum Computing: Modern Cryptography

In our first installment of a four-part series on post-quantum cryptography, we discuss contemporary cryptography and what defenders should know when it comes to developing a quantum-resistant cryptography plan.

September 12th, 2023 20 min read Morton Swimmer, Mark Chimley, Adam Tuaima
Read Article
Machine learning
Uncovering Silent Threats in Azure Machine Learning Service: Part 2

In our previous entry, we examined how credentials were being stored and logged in cleartext on compute instances (CIs) created in Azure Machine Learning (AML) service and the risks posed by the same. This article examines an information disclosure bug we found in one of the cloud agents used in the AML service and sheds light on the importance of threat modeling the agents’ features to uncover silent and hidden attack surfaces.

August 30th, 2023 6 min read Nitesh Surana
Read Article
Machine learning
Uncovering Silent Threats in Azure Machine Learning Service: Part I

We probed the Azure Machine Learning (AML) service to identify security flaws and vulnerabilities and shed light on the unseen aspects of silent threats in managed services like AML.

August 17th, 2023 13 min read Nitesh Surana
Read Article
AICybercriminal underground
Hype vs. Reality: AI in the Cybercriminal Underground

This report discusses the state of generative artificial intelligence (AI) in the cybercriminal underground: how cybercriminals are using ChatGPT, how they're adding ChatGPT features to their criminal products, and how they’re trying to remove censorship to ask ChatGPT anything.

August 15th, 2023 17 min read David Sancho, Vincenzo Ciancaglini
Read Article
Cybersecurity Under Strain of SecOps Pain Points

In this first installment in our series on the challenges of the cybersecurity industry, we explore the underlying causes of the workforce gaps that have long plagued SOC teams.

August 10th, 2023 6 min read TrendAI™ Research
Read Article
Cyber crimeExploits & Zero-Days
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services

This article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.

July 27th, 2023 28 min read Fyodor Yarochkin, Philippe Lin, Bakuei Matsukawa, Ryan Flores…
Read Article
Ransomware & extortionExploits & Zero-Days
Ransomware Spotlight: Play

Play is shaping up to be a player on the rise within the ransomware landscape, with its operators likely to continue using the ransomware in future. We take a deep dive into its operations and offer ways in which organizations can shore up their defenses against this emerging threat.

July 21st, 2023 8 min read TrendAI™ Research
Read Article
IoT & smart devices
A Deep Dive into the Packet Reflection Vulnerability Allowing Attackers to Plague Private 5G Networks

The lack of encryption and authentication mechanisms in the GTP-U protocol between base stations and 5GC UPFs could allow cybercriminals to use a packet reflection vulnerability to carry out attacks on 5G devices in internal networks.

July 11th, 2023 5 min read Salim S. I.
Read Article