Volume Is Not Risk: Making Sense of the “Vulnpocalypse”
According to the FIRST Exploit Prediction Scoring System (EPSS), only around 5% of all published CVEs are ever observed being...
Trend Micro Research : Exploits & Vulnerabilities
From Langflow to Monero: Inside CVE-2026-33017 Cryptominer
Stage 2: isp.sh - the dropper that prepares the ground isp.sh is a bash script served from 83142209214. Its job...
Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
We track the binary payload chain (CVE-2025-8088 to LNK to PowerShell to result.dll) under SHADOW-EARTH-066, our temporary designation for the...
Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI’s Biggest AI Showdown Yet
In Pwn2Own Berlin, researchers found 47 unique zero-days across ten target categories, with payouts totaling US$1,298,250, a new event record....
Identity Protection in the AI Era
Identity has become the primary attack surface in modern enterprises. As organizations expand across cloud platforms, SaaS ecosystems, and distributed...
The Real Risk of Vibecoding
The ownership problem no one talks about One of the biggest risks in vibe coding isn’t that nobody owns the...
Why East-West Visibility Matters for Grid Security
Electric power infrastructure is becoming more connected than ever before. Organizations responsible for operating the Bulk Electric System (BES) are...
Embracing Choice in Cybersecurity: TrendAI Vision One™ and SentinelOne Integration
Endpoint Choice, Centralized Risk Clarity Modern security environments rarely rely on a single technology stack. Organizations need the ability to...
