The Real Risk of Vibecoding
The ownership problem no one talks about One of the biggest risks in vibe coding isn’t that nobody owns the...
Trend Micro Research : Cyber Threats
TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM
The Telnyx compromise indicates a continued change in the techniques used in TeamPCP’s supply‑chain activity, with adjustments to tooling, delivery...
Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
Attribution analysis Based on technical artifacts, infrastructure overlaps, and victimology, TrendAI™ Research attributes this campaign to Pawn Storm with high confidence. This...
Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries
The infection begins when the victim manually executes a file disguised as a legal notice: Dokumentation über Verstöße gegen Rechte...
Why East-West Visibility Matters for Grid Security
Electric power infrastructure is becoming more connected than ever before. Organizations responsible for operating the Bulk Electric System (BES) are...
TrendAI™ Supports Global Law Enforcement Efforts
Serious fraud and cybercrime know no boundaries — jurisdictional or otherwise. Criminal gangs operate with impunity across borders, often leaving...
Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack
Following initial access, the threat actors conducted extensive lateral movement using a combination of legitimate administration tools and credential abuse....
Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites
While the execution of the bytecode was not successful in our tests, we saw that it contains strings and a...
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages | Trend Micro (US) Content has been added to your...
Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations
The operations of phishing-as-a-service (PhaaS) platform Tycoon 2FA was taken offline this week by the combined effort of law enforcement that includes Europol and other partner agencies, as well...
U.S. Public Sector Under Siege
The convergence of digital transformation and evolving threat landscapes has placed US government agencies and educational institutions on the frontlines...
Embracing Choice in Cybersecurity: TrendAI Vision One™ and SentinelOne Integration
Endpoint Choice, Centralized Risk Clarity Modern security environments rarely rely on a single technology stack. Organizations need the ability to...
Pwn2Own: Researchers Earn $1 Million for 76 Zero-Days
Discovering critical vulnerabilities across connected vehicles, EV chargers, and automotive systems As connected cars proliferate worldwide, data security for vehicles...
Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware
Based on its geofencing behavior, we assess that the threat actors are likely of Russian origin, or those from the...
