Research, News, and Perspectives

Artificial Intelligence (AI)

Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do

Threat actors leveraged Anthropic’s Claude Code npm release packaging error to distribute Vidar, GhostSocks, and PureLog Stealer. This blog details immediate steps organizations can take and best practices to prevent further risk.

Research 2026/04/07

Artificial Intelligence (AI)

Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads

A packaging error in Anthropic’s Claude Code npm release briefly exposed internal source code. This entry examines how threat actors rapidly weaponized the resulting attention, pivoting an existing AI-themed campaign to spread Vidar and GhostSocks.

Research 2026/04/03

Privacy & Risks

TrendAI Insight: New U.S. National Cyber Strategy

TrendAI reviews the White House National Cyber Strategy, outlining six pillars to strengthen U.S. cybersecurity—from deterrence and regulation to federal modernization, critical infrastructure protection, AI leadership, and workforce development.

The Real Risk of Vibecoding

This blog looks at how AI‑driven vibecoding speeds up software development while increasing security risk by outpacing traditional review and ownership. It explains why security needs to move earlier and be built into modern development workflows.

Expert Perspective 2026/03/31

Cyber Threats

Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads

A supply chain attack hit Axios when attackers used stolen npm credentials to publish malicious versions containing a phantom dependency. This triggered a cross-platform RAT during installation and replaced its files with clean decoys, making detection challenging.

Latest News 2026/03/31

Artificial Intelligence (AI)

TrendAI™ Research at RSAC 2026: Advancing Defense Across AI‑Driven and Cyber‑Physical Threats

TrendAI™ Research explored agentic AI cybercrime and EV infrastructure security through two research sessions at RSAC 2026.

Latest News 2026/03/31

Malware

TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM

Moving beyond their LiteLLM campaign, TeamPCP weaponizes the Telnyx Python SDK with stealthy WAV‑based payloads to steal credentials across Linux, macOS, and Windows.

Research 2026/03/30

Artificial Intelligence (AI)

Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

TeamPCP orchestrated one of the most sophisticated multi-ecosystem supply chain campaigns publicly documented to date. It cascaded through developer tooling and compromised LiteLLM and exposed how AI proxy services that concentrate API keys and cloud credentials become high-value collateral when supply chain attacks compromise upstream dependencies.

Latest News 2026/03/26

APT & Targeted Attacks

Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

This blog discusses the steganography, cloud abuse, and email-based backdoors used against the Ukrainian defense supply chain in the latest Pawn Storm campaign that TrendAI™ Research observed and analyzed.

Latest News 2026/03/26

Artificial Intelligence (AI)

Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach

Litellm PyPI breach explained: malicious versions steal cloud credentials, SSH keys, and Kubernetes secrets. Learn impact and urgent mitigation steps.

Expert Perspective 2026/03/25

Research, News, and Perspectives

Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads

Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do

Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads

TrendAI Insight: New U.S. National Cyber Strategy

The Real Risk of Vibecoding

Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads

TrendAI™ Research at RSAC 2026: Advancing Defense Across AI‑Driven and Cyber‑Physical Threats

TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM

Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach

Trend Vision One™ - 主動防護由此啟廸。

資源

支援

關於趨勢科技

香港暨澳門辦事處

Research, News, and Perspectives

Trending Topics

Trend Vision One™ - 主動防護由此啟廸。

資源

支援

關於趨勢科技

香港暨澳門辦事處