Skip to main content

TrendAI™ 深入研究

火花

Featured Articles

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation
AIOT & critical infrastructure

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation

The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.

2026年9月16日TrendAI™ Research
Read article
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
IoT & smart devicesASM ASRM
Rethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data

China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.

2026年9月10日 6 min
Fyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article
An industrial worker inspecting a warehouse
HacktivismRansomware & extortion
Mapping the Criminal Economy Targeting Critical Infrastructure

TrendAI™ Research went inside the forums, marketplaces, and Telegram channels where access to factories, utilities, and energy firms is bought, sold, and weaponized. Combing through two years’ worth of data revealed an underground where financially motivated brokers and ransomware crews now operate alongside state-aligned hacktivists, sharing the same entry vectors, the same pirated training, and in some cases, the same personnel.

2026年9月2日 7 min
Mayra Rosario Fuentes, Stephen Hilt, Numaan Huq
Read article
Security 101: Virtual Patching
Exploits & Zero-Days
Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

2026年8月25日 5 min
TrendAI™ Research
Read article

Search for research articles

Cyber propagandaMalware
Understanding Hacktivists: The Overlap of Ideology and Cybercrime

Hacktivist groups are driven by a political or ideological agenda. In the past, their actions were likened to symbolic, digital graffiti. Nowadays, hacktivist groups resemble urban gangs. Previously composed of low-skilled individuals, these groups have evolved into medium- to high-skill teams, often smaller in size but far more capable.

February 4th, 2025 17 min read David Sancho
Read Article
Cybercriminal underground
Across the Span of the Spanish Cybercriminal Underground: Current Activities and Trends

What does the present state of the Spanish-speaking cybercriminal underground look like? What are the most common scams and other illicit offerings peddled by cybercriminals? Unearth the secrets of the Spanish dark market in our research.

January 30th, 2025 18 min read Mayra Rosario Fuentes, David Sancho
Read Article
Ransomware & extortionRansomware as a Service (RaaS)Cybercriminal underground
Ransomware Spotlight: Ransomhub

RansomHub is a young Ransomware-as-a-Service (RaaS) group tracked by Trend Micro as Water Bakunawa. Despite being a young ransomware group first detected in February 2024, RansomHub moves boldly by targeting larger enterprises more likely to pay ransoms.

December 20th, 2024 TrendAI™ Research
Read Article
DevopsCloud security
Unleashing Chaos: Real World Threats Hidden in the DevOps Minefield

Threat actors are actively looking for exposed .env files. These files have become ticking bombs deeply rooted inside DevOps practices. Our research paper uncovers the hidden dangers in DevOps using real-world examples.

December 12th, 2024 4 min read TrendAI™ Research
Read Article
Cyber riskASM ASRMRansomware & extortion
From Vulnerable to Resilient: Cutting Ransomware Risk with Proactive Cyber Risk Exposure Management

This article highlights the critical importance of reducing the Cyber Risk Index, presenting findings that establishes a significant correlation between higher Risk Indices and increased susceptibility to ransomware infections.

December 11th, 2024 22 min read Bakuei Matsukawa
Read Article
AIData privacy & regulation
AI Assistants in the Future: Security Concerns and Risk Management

The article explores the evolving landscape of AI digital assistants, highlighting their transformative potential, associated security risks, and the importance of robust design and collaboration to ensure a secure and user-centric future.

December 6th, 2024 15 min read
Vincenzo Ciancaglini, Salvatore Gariuolo, Stephen Hilt, Robert McArdle…
Read Article
AIMachine learning
Silent Sabotage: Weaponizing AI Models in Exposed Containers

How can misconfigurations help threat actors abuse AI to launch hard-to-detect attacks with massive impact? We reveal how AI models stored in exposed container registries could be tampered with— and how organizations can protect their systems.

December 4th, 2024 14 min read Alfredo Oliveira , David Fiser
Read Article
AIDeepfakes
AI vs AI: DeepFakes and eKYC

This analysis investigates the security risks of eKYC systems in relation to deepfake attacks, highlighting the diverse strategies employed by cybercriminals in bypassing eKYC security measures.

November 28th, 2024 15 min read Philippe Lin, Fernando Mercês, Roel Reyes, Ryan Flores…
Read Article
IoT & smart devicesNetwork
Cellular IoT Vulnerabilities: Another Door to Cellular Networks

Cellular IoT vulnerabilities show an increasing trend over the years, indicating that these devices are becoming more and more popular — and that they are being targeted more frequently.

October 31st, 2024 7 min read Jennifer C. Lin, Richard Y. Lin, Salim S.I
Read Article
Ransomware & extortionCybercriminal underground
Ransomware Spotlight: INC

INC ransomware has been observed to exploit CVE-2023-3519 and uses HackTool.Win32.ProcTerminator.A for defense evasion and HackTool.PS1.VeeamCreds for credential access in its different attack chains.

October 29th, 2024 6 min read TrendAI™ Research
Read Article