Research, News, and Perspectives

Cyber Crime

13M+ Emails Sent in Tech Support Scam Targeting Users, Organisations in Japan

We analysed a sustained tech support scam campaign that sent more than 13 million emails to Japanese addresses, with workplace-themed lures suggesting a possible expansion toward enterprise targets.

Research Jul 23, 2026

Cyber Crime

Law Enforcement Takes Down Kratos/Sneaky2FA Phishing Service

Kratos, the phishing-as-a-Service (PhaaS) platform behind a large share of recent Microsoft 365 credential theft, has been taken offline by the BKA and ZIT in an operation dubbed Olympus Blade.

Research Jul 22, 2026

Phishing

Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass

Device code phishing abuses a legitimate authentication feature designed for devices with limited input capabilities. This article breaks down how the technique works, examines a recent observed case, and outlines the layered security measures organisations can implement.

Research Jul 22, 2026

Exploits & Vulnerabilities

Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026.

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

TrendAI™ Research analysed over 200 Gemini CLI session logs showing how a Russian-speaking threat actor used AI to run a live botnet, finishing a full C&C migration in six minutes while doing just 11% of the work himself.

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry

In this blog entry, TrendAI™ Research examines a wave of phishing emails observed in May 2026 that targeted Japanese accommodation facilities using Booking.com, detailing the victims, attack techniques used, and characteristics of the malware involved.

Research Jun 29, 2026

Cyber Threats

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application infrastructure for their next foothold.

Research Jun 23, 2026

Artificial Intelligence (AI)

When AI Grows Faster Than Security Strategy

I think we can all agree that artificial intelligence has evolved from innovative projects into a business reality. New use cases emerge daily as employees experiment with generative AI tools, and organizations increasingly integrate AI into business processes.

Expert Perspective Jun 23, 2026

Cyber Threats

PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM

A pre-authentication remote code execution (RCE) chain in Oracle PeopleSoft PeopleTools abuses the Integration Broker's PSIGW gateway to execute code inside the application server's Java virtual machine (JVM), evading behavioural and network sensors.

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims towards malicious download pages before quietly moving their operation onto claude.ai's own platform, turning the trusted domain into a delivery mechanism for credential-stealing malware.

Research, News, and Perspectives

Law Enforcement Takes Down Kratos/Sneaky2FA Phishing Service

13M+ Emails Sent in Tech Support Scam Targeting Users, Organisations in Japan

Law Enforcement Takes Down Kratos/Sneaky2FA Phishing Service

Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass

Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

When AI Grows Faster Than Security Strategy

PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

Trend Vision One™ - Proactive Security Starts Here.

Resources

Support

About Trend

Country Headquarters

Research, News, and Perspectives

Trending Topics

Trend Vision One™ - Proactive Security Starts Here.

Resources

Support

About Trend

Country Headquarters