TrendAI Research supplied intelligence that helped disrupt a botnet of more that 1.3-million pre-infected set-top boxes globally, writes GARETH REDELINGHUYS.

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what ...

Google揭露XCPE殭屍網路事件後，TrendAI依據今年6月至10月的觀測資料公布各地感染規模，全球逾147萬臺設備受感染、遍布170多個國家，臺灣約有8.8萬臺

Chrome installs a 4.27 GB AI model on qualifying desktops without asking. Once it's there, any HTTPS website the user visits can run it with no consent prompt, no usage indicator, and no rate limit.

Uma operação internacional liderada pelo Google desmantelou uma rede criminosa que infectou mais de 1,3 milhão de aparelhos TV Box com sistema Android em diferentes países. No Brasil, foram identificados 150.080 dispositivos comprometidos, segundo levantamento da empresa de segurança digital TrendAI. O programa malicioso, identificado como XCPE, já vinha instalado no firmware dos equipamentos antes […]

The Document Foundationは11月5日、オープンソースのオフィスソフト「LibreOffice」で1件の脆弱性を修正したと発表した。本脆弱性はAnthropicがエージェントを使ってオープンソースプロジェクトのセキュリティを調査するなかで「Claude」が発見し、Ada Logics社が検証・報告したもの。「TrendAI Zero Day Initiative」と協力する匿名の研究者からも報告されている。

Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue. Credit: Anonymous working with TrendAI Zero Day Initiative (finder)...

On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigation I conducted with Minh Giang and Lucas Miller of TrendAI

TrendAI analyzes three cyber campaigns involving autonomous and AI-assisted attacks, including CyberStrikeAI activity targeting Japan.

TrendAI analyzes three cyber campaigns involving autonomous and AI-assisted attacks, including CyberStrikeAI activity targeting Japan.

Russia-aligned threat actor Earth Sirrush has sustained spear-phishing operations against Ukrainian government, defense, border security, and logistics organizations since at least 2022.

A coalition of private-sector security firms working with Japan’s National Police Agency has disrupted XCPE, a backdoor used to build a massive botnet comprising more than 1.3 million Android devices across more than 200 countries. Google, Lumen, Human Security, Plume, Synthient, and TrendAI participated in the disruption. “We assess with high confidence that the backdoor […] Källa

​ Google, Plume, TrendAI™, Lumen, HUMAN Security, Synthient and Japan's National Police Agency form coordinated effort combining security research, threat intelligence and network expertise to identify and disrupt X.CPE botnet MOUNTAIN VIEW, Calif., Nov. 2, 2026 /PRNewswire/ -- Today, a group of private and public sector partners announced a coordinated takedown of X.CPE, a global botnet hidden in more than 1.3 million set-top boxes across more than 200 countries.

Cet article détaille le démantèlement du botnet XCPE, opéré par Videostrong Technology Co., un fabricant OEM/ODM Android basé en Chine. L'opération a été menée en collaboration avec la Police Nationale Japonaise, Lumen, HUMAN Security, Plume, Synthient et TrendAI.

GoogleはVideostrongのボットネットを無力化、130万台超のAndroid機器を切断したほか、影響を受ける機器は1000万台超。Videostrongのライセンスは取り消し。

TrendAIは、AIを悪用して日本の組織を狙うサイバー攻撃の調査結果を公開した。44のAIエージェントを連携させ、偵察から脆弱性の悪用、情報窃取までの攻撃工程を自動化する事例などを確認。少なくとも19組織が脆弱性の検証対象となり、このうち16組織以上が日本国内に所在していたという。

Eine neue Studie zeigt, wie unterschiedlich staatliche APT-Akteure in China, Russland, Nordkorea und Iran leistungsfähige KI für Cyberoperationen nutzen. Die Strategien spiegeln wider, welche technischen und infrastrukturellen Möglichkeiten den Akteuren zur Verfügung stehen und wie sie den Zugang zu KI organisieren. Bei der neuen Studie von TrendAI geht es nicht allein um die verwendeten Modelle, sondern auch darum, wie unabhängig die Akteure von einzelnen Anbietern sind. Derzeit laufen die meisten beobachteten Fälle staatsnaher KI-Nutzung über kommerzielle Anbieter; setzen Staaten künftig stärker auf eigene Modelle, nimmt für Verteidiger die Sichtbarkeit ab.... Der Beitrag Staatliche APT-Akteure: So gelangen sie an KI für Cyberoperationen erschien zuerst auf B2B Cyber Security.

Kıtalararası   İsrail merkezli Discover-Tech şirketi, 100’den fazla ülkede Starlink kullanıcılarına gösterilecek reklamlar için düzenlenen açık artırmalarda en fazla teklifi veren şirket oldu. TrendAI...