Cybercrime & Digital Threats

State-aligned threat actors are folding AI into every stage of the attack chain while hiding their infrastructure inside the services defenders already trust. This report unpacks the geopolitics driving the activity and what defenders should prioritize next.

The second installment of this series offers an in-depth look at the next three pillars of the strategy and demonstrates how our capabilities help government agencies with secure implementation.

Rethink endpoint security for the AI era. Endpoints now converge users, identities, data, and AI, increasing risk from shadow AI and advanced attacks. This demands stronger visibility, correlation, and resilience.

TrendAI™ Research analyzed 2,014 enterprises throughout 2025 and found that cyber damage is shaped by the interaction of attack pressure and exposure, with the highest-risk organizations experiencing up to 3.3 times as much damage as the lowest. The study introduces a Cyber Risk Positioning Map that can help organizations identify whether to prioritize reducing exposure, strengthening response capability, or both.

Organizations are rapidly connecting AI agents to their databases, document pipelines, and internal tools, creating privileged components that read untrusted input as part of their job. TrendAI™ Research examines how attackers turn these agents against you through return-to-tool (RTT) exploits, and what this means for the future of agentic AI security.

TrendAI™ and CleanDNS have partnered to go beyond blocking malicious domains. Learn how we are actively dismantling the infrastructure that cybercriminals depend on and removing attacker domains from the internet before attacks reach their targets.

Analysis from TrendAI™ Research found that thousands of DICOM medical imaging servers worldwide are exposed online without basic security measures, leaving sensitive patient data and healthcare operations vulnerable to cyberattacks.

Tightening security controls and other underground factors are forcing infostealer operations to adapt. TrendAI™ Research explores their evolution into coordinated attack infrastructure and the implications for identity defense.

Edge devices have become a primary entry point for state-sponsored espionage, giving attackers a cheaper, faster path to network access, credential theft, and traffic interception. Our report examines the threat landscape, economics, and actor activity driving this shift, along with what CISOs and security leaders can do to respond.