Research, News, and Perspectives

The Signs Were There: What the First Autonomous Ransomware Case Confirms

An AI agent has run a ransomware intrusion on its own for the first time, from break-in to data destruction. The autonomous attacks TrendAI™ Research predicted are beginning to arrive, and defending against them shifts from blocking known indicators to detecting behavior.

Jul 24, 2026

Save to Folio

Jul 24, 2026

Save to Folio

Cyber-Kriminalität

13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan

We analyzed a sustained tech support scam campaign that sent more than 13 million emails to Japanese addresses, with workplace-themed lures suggesting a possible expansion toward enterprise targets.

Research Jul 23, 2026

Save to Folio

Research Jul 23, 2026

Save to Folio

Künstliche Intelligenz (KI)

Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It

OpenAI’s own models broke out of a test sandbox and into Hugging Face’s servers to solve an evaluation, with no human attacker involved. The incident showed how keeping agentic AI safe now depends on how it’s contained, not just on how it’s trained.

Research Jul 23, 2026

Save to Folio

Research Jul 23, 2026

Save to Folio

Cyberbedrohungen

Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure

TrendAI™ Research breaks down what changed in CISA’s updated advisory on an ongoing PLC exploitation, why this activity might be more dangerous than a similar campaign in 2023, and how organizations can take action now to protect themselves.

Latest News Jul 23, 2026

Save to Folio

Latest News Jul 23, 2026

Save to Folio

Network

Business (Email) Compromise immer noch erfolgreich

Business Email Compromise (BEC) gilt als eine der erfolgreichsten Angriffsarten. Die Zutaten sind eigentlich immer dieselben: eine Aufforderung, Geld zu überweisen und das schnell, sowie darüber zu schweigen. Helfen klare Richtlinien für Finanztransaktionen?

Expert Perspective Jul 22, 2026

Save to Folio

Expert Perspective Jul 22, 2026

Save to Folio

Cyber-Kriminalität

Law Enforcement Takes Down Kratos/Sneaky2FA Phishing Service, With an Assist From TrendAI™

Kratos, the phishing-as-a-Service (PhaaS) platform behind a large share of recent Microsoft 365 credential theft, has been taken offline by the BKA and ZIT in an operation dubbed Olympus Blade.

Research Jul 22, 2026

Save to Folio

Research Jul 22, 2026

Save to Folio

Phishing

Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass

Device code phishing abuses a legitimate authentication feature designed for devices with limited input capabilities. This article breaks down how the technique works, examines a recent observed case, and outlines the layered security measures organizations can implement.

Research Jul 22, 2026

Save to Folio

Research Jul 22, 2026

Save to Folio

Cyberbedrohungen

Smart Contracts für Blockchain-C&C

Angreifer nutzten die EtherHiding-Technik, um die Auslieferung der ClearFake-Payload über Smart Contracts zu leiten. Diese unveränderliche, frei betreibbare Infrastruktur kann wegen der Natur eines Blockchain-Netzwerks nicht abgeschaltet werden.

Latest News Jul 21, 2026

Save to Folio

Latest News Jul 21, 2026

Save to Folio

Ausnutzung von Schwachstellen

Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026.

Latest News Jul 21, 2026

Save to Folio

Latest News Jul 21, 2026

Save to Folio

Künstliche Intelligenz (KI)

RTT-Exploits, neue Angriffsmuster gegen KI-Agenten

KI-Agenten sind privilegierte Komponenten, die im Rahmen ihrer Aufgaben auch nicht vertrauenswürdige Eingaben auswerten. Wer dies übersieht, baut alle Kontrollmechanismen auf einem Exploit auf, den Angreifer nach dem Muster „Return-to-Tool“ zu nutzen wissen.

Expert Perspective Jul 16, 2026

Save to Folio

Expert Perspective Jul 16, 2026

Save to Folio