Research, News, and Perspectives

Sfruttamento vulnerabilità

Volume Is Not Risk: Making Sense of the “Vulnpocalypse”

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026.

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

TrendAI™ Research analyzed over 200 Gemini CLI session logs showing how a Russian-speaking threat actor used AI to run a live botnet, finishing a full C&C migration in six minutes while doing just 11% of the work himself.

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry

In this blog entry, TrendAI™ Research examines a wave of phishing emails observed in May 2026 that targeted Japanese accommodation facilities using Booking.com, detailing the victims, attack techniques used, and characteristics of the malware involved.

Research Jun 29, 2026

Minacce cyber

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application infrastructure for their next foothold.

Research Jun 23, 2026

Intelligenza artificiale (IA)

When AI Grows Faster Than Security Strategy

I think we can all agree that artificial intelligence has evolved from innovative projects into a business reality. New use cases emerge daily as employees experiment with generative AI tools, and organizations increasingly integrate AI into business processes.

Expert Perspective Jun 23, 2026

Minacce cyber

PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM

A pre-authentication remote code execution (RCE) chain in Oracle PeopleSoft PeopleTools abuses the Integration Broker's PSIGW gateway to execute code inside the application server's Java virtual machine (JVM), evading behavioral and network sensors.

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims toward malicious download pages before quietly moving their operation onto claude.ai's own platform, turning the trusted domain into a delivery mechanism for credential-stealing malware.

Governing Claude Enterprise in Environments Where Inline Controls Can't Go

TrendAI™ integrates Anthropic's Claude Compliance API into TrendAI Vision One™ through two collectors that bring AI-aware visibility and detection to Claude Enterprise usage: one keeps all data inside the environment, while the other feeds TrendAI Vision One™ for deeper correlation and compliance.

Jun 12, 2026

Intelligenza artificiale (IA)

GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026

This year’s Pwn2Own competition in Berlin revealed just how much of the AI stack remains exposed -- and the gap between what these tools promise and what they can withstand point to the fragile security foundations underneath.

Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched, showing how unmanaged software keeps an exploited entry point open long after the fix ships.

Research Jun 08, 2026

Research, News, and Perspectives

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

Volume Is Not Risk: Making Sense of the “Vulnpocalypse”

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

When AI Grows Faster Than Security Strategy

PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

Governing Claude Enterprise in Environments Where Inline Controls Can't Go

GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026

Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

Trend Vision One™ - La sicurezza proattiva inizia da qui.

Risorse

Assistenza

Informazioni su Trend

Sede legale nazionale

Research, News, and Perspectives

Trending Topics

Trend Vision One™ - La sicurezza proattiva inizia da qui.

Risorse

Assistenza

Informazioni su Trend

Sede legale nazionale