Research, News, and Perspectives

Artificial Intelligence (AI)

Supporting the National Cyber Strategy: How TrendAI™ Helps

A deeper look at the first three pillars and outlining how our capabilities directly support government agencies working to bring this strategy to life.

Expert Perspective May 06, 2026

Save to Folio

Expert Perspective May 06, 2026

Save to Folio

Cyber Threats

InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise

Targeting multiple industries worldwide, the InstallFix campaign uses fake Claude AI installer pages to trick users into running malware that collects system information, disables security features, achieves persistence, and connects to attacker-controlled C&C servers for additional payloads.

Research May 05, 2026

Save to Folio

Research May 05, 2026

Save to Folio

Cyber Threats

Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

TrendAI™ Research breaks down Quasar Linux (QLNX), a previously undocumented sophisticated Linux RAT with low detection rates. In this blog, we examine a full-featured Linux threat incorporating a rootkit, a PAM backdoor, credential harvesting, and more, revealing how this malware enables stealthy access, persistence, and potential supply-chain attacks.

Research May 04, 2026

Save to Folio

Research May 04, 2026

Save to Folio

APT & Targeted Attacks

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defence Sectors in Asia

A China-aligned threat group is exploiting unpatched Microsoft Exchange vulnerabilities to conduct cyberespionage against government and critical infrastructure targets across Asia and beyond.

Research Apr 30, 2026

Save to Folio

Research Apr 30, 2026

Save to Folio

Cyber Threats

Kuse Web App Abused to Host Phishing Document

Bad actors took advantage of the legitimate name and services of Kuse, a popular AI-based app designed for workplaces. The attackers exploited the users’ trust in Kuse to carry out a phishing attack.

Research Apr 29, 2026

Save to Folio

Research Apr 29, 2026

Save to Folio

Cyber Threats

Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories

Our research on Void Dokkaebi’s operations uncovered a campaign that turns infected developer repositories into malware delivery channels. By spreading through trusted workflows, organisational codebases, and open-source projects, the threat can scale from a single compromise to a broader supply chain risk.

Research Apr 21, 2026

Save to Folio

Research Apr 21, 2026

Save to Folio

Artificial Intelligence (AI)

The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables

An OAuth supply chain compromise at Vercel exposed how trusted third party apps and platform environment variables can bypass traditional defences and amplify blast radius. This article examines the attack chain, underlying design trade-offs, and what it reveals about modern PaaS and software supply chain risk.

Research Apr 20, 2026

Save to Folio

Research Apr 20, 2026

Save to Folio

Cyber Threats

Cyber Resilience, Sovereignty, and AI: What Europe’s Energy Sector Must Prepare for Next

Europe’s energy sector underpins almost every aspect of modern society. Electricity generation, transmission, and distribution are not just economic functions but foundations of public safety, healthcare, transportation, and national stability.

Expert Perspective Apr 17, 2026

Save to Folio

Expert Perspective Apr 17, 2026

Save to Folio

Artificial Intelligence (AI)

Identity Protection in the AI Era

Enterprises aiming to predict and mitigate human, machine, and AI‑agent risks at scale demand AI‑powered identity‑first security without compromise.

Latest News Apr 13, 2026

Save to Folio

Latest News Apr 13, 2026

Save to Folio

APT & Targeted Attacks

U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026

The first quarter of 2026 has reinforced a hard truth: U.S. government agencies and educational institutions are operating in the most hostile cyber threat environment ever recorded.

Expert Perspective Apr 09, 2026

Save to Folio

Expert Perspective Apr 09, 2026

Save to Folio