Skip to main content

TrendAI™ 深入研究

火花

Featured Articles

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation
AIOT & critical infrastructure

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation

The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.

2026年9月16日TrendAI™ Research
Read article
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
IoT & smart devicesASM ASRM
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data

China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.

2026年9月10日 6 min
Fyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article
An industrial worker inspecting a warehouse
HacktivismRansomware & extortion
Mapping the Criminal Economy Targeting Critical Infrastructure

TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.

2026年9月2日 7 min
Mayra Rosario Fuentes, Stephen Hilt, Numaan Huq
Read article
Security 101: Virtual Patching
Exploits & Zero-Days
Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

2026年8月25日 5 min
TrendAI™ Research
Read article

Search for research articles

Ransomware & extortionExploits & Zero-Days
Ransomware Spotlight: DragonForce

DragonForce, a Ransomware-as-a-Service group first observed in 2023, rose to greater prominence in 2025 after a series of notable attacks linked to the group. Despite its unclear origins, what is evident is its rapid evolution and its aggressive, affiliate-driven model, marking it as a rising threat to watch out for.

October 29th, 2025 10 min read TrendAI™ Research
Read Article
AILLMsCloud security
Stay Ahead of AI Threats: Secure LLM Applications With Trend Vision One

Trend Vision One™ tackles 9 of OWASP’s Top 10 LLM vulnerabilities, offering comprehensive protection against prompt injection, data leakage, AI supply chain risks, and other critical flaws.

October 14th, 2025 4 min read Fernando Cardoso, Dave McDuff, Fernando Tucci, Kim Kinahan…
Read Article
AIOT & critical infrastructure
Agentic Edge AI: Autonomous Intelligence on the Edge

Agentic edge AI offers enhanced advantages, but with this comes cybersecurity challenges. Learn more about agentic edge AI and its architecture, and equip your organization by examining related threats and mitigation strategies for these risks.

October 10th, 2025 18 min read Numaan Huq, Roel Reyes
Read Article
Cloud security
Using Containers to Secure Your MCP Infrastructure

Security risks to MCP servers can be mitigated by running them within containers. This report discusses these security risks and how MCP containerization can implement least privilege in practice.

September 17th, 2025 14 min read Alfredo Oliveira , David Fiser
Read Article
Cyber crimeCloud
Complexity and Visibility Gaps in Power Automate

Amid the rise of low-code automation, Microsoft Power Automate is becoming an attractive target for cybercriminals exploiting its complexity to evade detection and exfiltrate data – but demand for compromised enterprise assets is outstripping supply in the cybercriminal underground.

September 7th, 2025 Stephen Hilt, Vladimir Kropotov, Fyodor Yarochkin, Benjamin Zigh
Read Article
Cyber crimeGenerative AI
Do Security Blogs Enable Vibe-Coded Cybercrime?

Security companies routinely publish detailed analyses of security incidents, making attacker tactics, techniques, and procedures (TTPs) widely known and visible. These reports often provide comprehensive insights into specific vulnerabilities that are or could be exploited, malware delivery mechanisms, and evasion techniques.

September 4th, 2025 5 min read
Ryan Flores, Numaan Huq, Vladimir Kropotov, Robert McArdle…
Read Article
Cyber crimeSocial engineering
Unmasking Task Scams to Prevent Financial Fallout From Fraud

This report exposes the life cycle and tactics of task scams by presenting real-world cases as well as strategies to help identify and avoid these threats.

August 19th, 2025 20 min read Christopher Boyton, Mayra Rosario Fuentes
Read Article
Cloud securityIdentity & access management (IAM)
Beware of MCP Hardcoded Credentials: A Perfect Target for Threat Actors

Poor secret management in MCP servers can lead to serious consequences, including data breaches and supply chain attacks. This article examines the reality of these unsecure configurations and offers practical recommendations that minimize the chances of exposure.

August 13th, 2025 7 min read Alfredo Oliveira , David Fiser
Read Article
AILLMsAI governance
LLM as a Judge: Evaluating Accuracy in LLM Security Scans

As large language models (LLMs) become more capable and widely adopted, the risk of unintended or adversarial outputs grows, especially within a security-sensitive context. To identify and mitigate such risks, Trend Micro researchers ran LLM security scans that simulate adversarial attacks.

August 4th, 2025 13 min read Matthew Burton, Albert Shala, Anurag Das
Read Article
AICyber crime
The Silent Leap: OpenAI’s New ChatGPT Agent Capabilities and Security Risks

OpenAI recently introduced ChatGPT agent. What are its capabilities and the associated cybersecurity risks? We examined these using Trend Micro’s Digital Assistant Framework to help organizations navigate the changes and risks this new digital assistant may bring.

August 1st, 2025 12 min read Salvatore Gariuolo, Rainer Vosseler
Read Article