Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
The security industry has spent two years debating whether open AI models are a risk. We think that is the...
Trend Micro Research : Artificial Intelligence (AI)
The Signs Were There: What the First Autonomous Ransomware Case Confirms
Key takeaways Security researchers have documented an AI agent running a full ransomware operation on its own against a live...
Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It
Given enough leeway, an AI system can cause real damage entirely on its own, with no malicious intent and no...
Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet
Even though the actor managed to jailbreak the AI agent and bypass its safety controls for the operations mentioned above, the guardrail was still triggered on some occasions. In the instances...
Governing Claude Enterprise in Environments Where Inline Controls Can’t Go
When Anthropic launched the Claude Compliance API in May 2026, it acknowledged something security teams have been wrestling with quietly:...
Agentic Governance: Why It Matters Now
How this fails in the real world The ugly failures are mundane. No Hollywood hacker required. An agent picks a...
Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America
The server-side controllers for these tools were both implemented as Python-based servers. The Python source code contained comprehensive comments, structured...
Supporting the National Cyber Strategy: How TrendAI™ Helps
Government Agencies Deliver on Pillars 1 Through 3 In our previous blog, we applauded the White House Office of the...
Identity Protection in the AI Era
Identity has become the primary attack surface in modern enterprises. As organizations expand across cloud platforms, SaaS ecosystems, and distributed...
U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026
The first quarter of 2026 has reinforced a hard truth: U.S. government agencies and educational institutions are operating in the...
Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do
Key takeaways: Attackers rapidly leveraged the Claude Code packaging error incident to distribute credential-stealing malware using fake GitHub repositories. This demonstrates how quickly threat actors can...
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
While the immediate threat is the social engineering campaign delivering Vidar, the leaked source code itself presents a distinct and...
TrendAI Insight: New U.S. National Cyber Strategy
TrendAI would like to commend the White House Office of the National Cyber Director (ONCD), led by Sean Cairncross, and...
The Real Risk of Vibecoding
The ownership problem no one talks about One of the biggest risks in vibe coding isn’t that nobody owns the...
Why East-West Visibility Matters for Grid Security
Electric power infrastructure is becoming more connected than ever before. Organizations responsible for operating the Bulk Electric System (BES) are...
