Research, News, and Perspectives

Cyber Threats

Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave

Between January and June 2026, TrendAI™ tracked more than 35,000 fake sites exploiting the 2026 FIFA World Cup, spanning counterfeit merchandise shops, cloned ticket pages, and bogus free-streaming sites, which together drew roughly 1.48 million visits from Japan.

Research Jul 29, 2026

Cyber Threats

The Signs Were There: What the First Autonomous Ransomware Case Confirms

An AI agent has run a ransomware intrusion on its own for the first time, from break-in to data destruction. The autonomous attacks TrendAI™ Research predicted are beginning to arrive, and defending against them shifts from blocking known indicators to detecting behaviour.

Jul 24, 2026

Cyber Crime

13M+ Emails Sent in Tech Support Scam Targeting Users, Organisations in Japan

We analysed a sustained tech support scam campaign that sent more than 13 million emails to Japanese addresses, with workplace-themed lures suggesting a possible expansion towards enterprise targets.

Research Jul 23, 2026

Artificial Intelligence (AI)

Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It

OpenAI’s own models broke out of a test sandbox and into Hugging Face’s servers to solve an evaluation, with no human attacker involved. The incident showed how keeping agentic AI safe now depends on how it’s contained, not just on how it’s trained.

Research Jul 23, 2026

Cyber Threats

Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure

TrendAI™ Research breaks down what changed in CISA’s updated advisory on an ongoing PLC exploitation, why this activity might be more dangerous than a similar campaign in 2023, and how organisations can take action now to protect themselves.

Law Enforcement Takes Down Kratos/Sneaky2FA Phishing Service, With an Assist From TrendAI™

Kratos, the phishing-as-a-Service (PhaaS) platform behind a large share of recent Microsoft 365 credential theft, has been taken offline by the BKA and ZIT in an operation dubbed Olympus Blade.

Research Jul 22, 2026

Phishing

Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass

Device code phishing abuses a legitimate authentication feature designed for devices with limited input capabilities. This article breaks down how the technique works, examines a recent observed case, and outlines the layered security measures organisations can implement.

Research Jul 22, 2026

Exploits & Vulnerabilities

Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026.

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

TrendAI™ Research analysed over 200 Gemini CLI session logs showing how a Russian-speaking threat actor used AI to run a live botnet, finishing a full C&C migration in six minutes while doing just 11% of the work himself.

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry

In this blog entry, TrendAI™ Research examines a wave of phishing emails observed in May 2026 that targeted Japanese accommodation facilities using Booking.com, detailing the victims, attack techniques used, and characteristics of the malware involved.

Research Jun 29, 2026

Research, News, and Perspectives

Law Enforcement Takes Down Kratos/Sneaky2FA Phishing Service, With an Assist From TrendAI™

Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave

The Signs Were There: What the First Autonomous Ransomware Case Confirms

13M+ Emails Sent in Tech Support Scam Targeting Users, Organisations in Japan

Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It

Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure

Law Enforcement Takes Down Kratos/Sneaky2FA Phishing Service, With an Assist From TrendAI™

Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass

Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry

Trend Vision One™ - Proactive Security Starts Here.

Resources

Support

About Trend

Country Headquarters

Research, News, and Perspectives

Trending Topics

Trend Vision One™ - Proactive Security Starts Here.

Resources

Support

About Trend

Country Headquarters