logo

TrendAI Security Blog

ID: 2d72cf33-69bd-5cc5-89a5-41c165bae893

STIX ID: identity--2d72cf33-69bd-5cc5-89a5-41c165bae893

Feed Type: skeleton

Earliest post: -

Latest post: -

The TrendAI Security Blog provides expert research, news, and practical guidance on emerging cyber threats, vulnerabilities, AI security, and enterprise defense.

01/01/2020
10/14/2026
Title Date Published ↓Threat ScoreAuthorVisible
UK Power Facility Cyberattack Shutdown: What Critical-Infrastructure Operators and Defenders Need to Know2026-08-2270True
TrendAI™ Intelligence Aids Law Enforcement Arrest of Tycoon 2FA Operators2026-08-0375True
Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know2026-07-3175True
Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It2026-07-3178True
How TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow2026-07-2950True
When Trust in AI Becomes an Attack Surface: Analyzing Prompt Injection, Model Theft, and Pipeline Poisoning2026-06-3090True
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant2026-06-0185True
Living Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains2026-05-2678True
Pwn2Own Berlin 2026: On the Ground with ZDI's Biggest AI Showdown Yet2026-05-1970True
The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables2026-04-2175True
Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads2026-03-3092True
TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM2026-03-2785True
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads2026-03-2675True
Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach2026-03-2492True
Global Public Sector Under Siege: Threat Intelligence for Q2 20262026-03-0190True
U.S. Public Sector Under Siege: Threat Intelligence for Q1 20262026-03-0190True
Earth Sirrush: A Russia-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling2026-03-0188True
Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries2026-02-0675True
Viral AI, Invisible Risks: What OpenClaw Reveals About Agentic Assistants2026-01-3070True
Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities2026-01-1292True
XCSSET Mac Malware: Infects Xcode Projects, Uses 0Days2026-01-0185True
Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems2026-01-0190True
Analyzing a a Multi-Stage AsyncRAT Campaign via Managed Detection and Response2026-01-0175True
New AndroRAT Exploits Allow for Permanent Rooting2026-01-0170True
Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses2026-01-0175True
APT-C-36 Updates Its Long-term Spam Campaign Against South American Entities With Commodity RATs2026-01-0170True
TrendAI™ Advances Threat Hunting to Dynamic, Real-World Exploitation of AI Infrastructure2026-01-0168True
Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack2026-01-0185True
Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware2026-01-0180True
Digmine Miner Spreading via Facebook Messenger2026-01-0165True
Introducing ÆSIR: Finding Zero-Day Vulnerabilities at the Speed of AI2026-01-0180True
BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets2026-01-0180True
AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows2026-01-0170True
The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns2026-01-0188True
Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C2026-01-0178True
Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know2026-01-0195True
Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed2026-01-0185True
Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations2026-01-0175True
Deepfake CFO Video Calls Result in $25MM in Damages2026-01-0165True
Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques2026-01-0185True
Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks2026-01-0180True
Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer2026-01-0178True
Beauty Camera Apps Send Users Porn, Collects Pictures2026-01-0166True
Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities2026-01-0160True
AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT2026-01-0170True
From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers2026-01-0178True
Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions2026-01-0175True
Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper2026-01-0178True
Ranked First on CyberGym: TrendAI™ Agentic Exploit-Remediation Engine Scores 97% on the Top Exploit Benchmark2026-01-0170True
Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics2026-01-0172True

1–50 of 101