Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
The security industry has spent two years debating whether open AI models are a risk. We think that is the...
Trend Micro Research : Articles, News, Reports
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Clicking one of these search results carries the user from the compromised website, through relay pages hosted on blogging platforms,...
The Signs Were There: What the First Autonomous Ransomware Case Confirms
Key takeaways Security researchers have documented an AI agent running a full ransomware operation on its own against a live...
13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan
Over roughly three months (February 26 – May 31, 2026), we confirmed 4,721 fake alert sites but only 11 distinct...
Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It
Given enough leeway, an AI system can cause real damage entirely on its own, with no malicious intent and no...
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
In one of the cases we have investigated, a few hours after the user approved the request, the attacker signed...
Volume Is Not Risk: Making Sense of the “Vulnpocalypse”
According to the FIRST Exploit Prediction Scoring System (EPSS), only around 5% of all published CVEs are ever observed being...
Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet
Even though the actor managed to jailbreak the AI agent and bypass its safety controls for the operations mentioned above, the guardrail was still triggered on some occasions. In the instances...
TONResolver RAT Abuses TON Blockchain to Target Japan’s Hotel Industry
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry | Trend Micro (US) Content has been added to your...
From Langflow to Monero: Inside CVE-2026-33017 Cryptominer
Stage 2: isp.sh - the dropper that prepares the ground isp.sh is a bash script served from 83142209214. Its job...
PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM
PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM | Trend Micro (US) Content has been...
Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign
TrendAI™ Research monitoring found weekly campaigns since April 8, with each week introducing new pages, keyword, and geographic targeting. Wave...
Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
We track the binary payload chain (CVE-2025-8088 to LNK to PowerShell to result.dll) under SHADOW-EARTH-066, our temporary designation for the...
Governing Claude Enterprise in Environments Where Inline Controls Can’t Go
When Anthropic launched the Claude Compliance API in May 2026, it acknowledged something security teams have been wrestling with quietly:...
Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI’s Biggest AI Showdown Yet
In Pwn2Own Berlin, researchers found 47 unique zero-days across ten target categories, with payouts totaling US$1,298,250, a new event record....
