Media Coverage

"RondoDox" is characteristically unlike most botnets, researchers from Trend Micro said in a report on Thursday. Where others are specially crafted to pick apart select vulnerabilities like a surgeon, RondoDox blasts onto infected devices like Rambo, trying exploit after exploit to see which one sticks.

The expiration this week of decade-old legal protections for companies sharing cyberattack intelligence with the federal government is sending a chill across the cybersecurity industry, with experts fearing a wave of attacks ahead.

“Ransomware actors and their affiliates are regularly changing their TTPs [tactics, techniques, and procedures] nowadays to stay ahead of defenses as well as law enforcement,” said Jon Clay, Trend Micro’s vice-president of threat intelligence.

The extended MirrorFace campaign, for example, has likely led to critical data loss, says Jon Clay, VP of threat intelligence at cybersecurity firm Trend Micro.

None of the vulnerabilities Apple disclosed this week appear to be under active attack, Dustin Childs, head of threat awareness at Trend Micro’s Zero Day Initiative, told CyberScoop.

A threat actor is using legit-looking AI tools and software to sneak malware for future attacks on organizations worldwide. The campaign, which Trend Micro researchers are tracking as "EvilAI," has already racked up hundreds of victims across manufacturing, government, healthcare, and other sectors, and has infected organizations in the US, India, the UK, Germany, France, Brazil, and beyond.

Africa's cybercriminals, like the continent overall, are quickly gaining maturity, says Joshua Paul Ignacio, a senior threat researcher at Trend Micro, which also aided Interpol in the latest operation.

"We're talking artificial intelligence, but chatbots are really stupid," says David Sancho, Senior Threat Researcher at Trend Micro. "They process all text as if they had new information, and if that information is a command, they process the information as a command."

On the latest episode of the TechSpective Podcast, Tony Bradley spoke with Kevin Simzer, COO of Trend Micro, about how generative and agentic AI are reshaping development and defense strategies.

"A leak happened here somewhere," Dustin Childs, head of threat awareness at Trend Micro's Zero Day Initiative (ZDI), told The Register in July. "And now you've got a zero-day exploit in the wild, and worse than that, you've got a zero-day exploit in the wild that bypasses the patch, which came out the next day."

Dark Reading's Becky Bracken meets with Dustin Childs of Trend ZDI at Black Hat 2025.

While the cybercrime underground has professionalized and become more organized in recent years, threat actors are, to a great extent, still using the same attack methods today as they were in 2020.

How Kim Jong Un's regime leverages AI and vulnerable Americans to earn millions

The new offering allows organizations to model their entire information technology and operational technology environments in real time, including support to simulate threats, validate defenses and adjust policies before attacks can occur.

The expanded alliance brings new capabilities to partners in three critical cybersecurity growth areas.

A program to share information with cybersecurity companies may have exposed unpatched flaws in the company's SharePoint service.

Both Microsoft and Trend Micro later said that hackers had actually begun exploiting the bugs on July 7, a day before the patches. It is unclear how these hackers learned of these flaws, Childs said. Trend Micro said a technology company—which it declined to identify—was compromised in the attack that it observed.

The vulnerability opening the way for the attack was first identified in May at a Berlin hacking competition organised by cybersecurity firm Trend Micro that offered cash bounties for finding computer bugs in popular software.

Both techniques remain popular with state-sponsored and cybercriminal groups, says Peter Girnus, a senior threat researcher with cybersecurity firm Trend Micro's Zero Day Initiative (ZDI).

Louise McEvoy, Trend Micro’s vice president of U.S. channel, told CRN in an email that the vendor is “working to ensure that the changes within Microsoft’s MVI program strengthen our joint business.”

This new feature also has a security hole that "could affect thousands of AI agents," according to Trend Micro principal threat researcher Sean Park, who detailed the flaw and how an attacker could exploit it to hijack a support bot in a Tuesday post.

Operation Secure was also assisted by private cybersecurity partners, including Kaspersky, Group-IB, and Trend Micro.

Hallucination mitigation is also a core part of Trend Micro's responsible AI development strategy, says Shannon Murphy, senior manager of global security and risk strategy at Trend Micro. The company recently open sourced its threat detection AI model and agent, Trend Cybertron.

Irrespective of market conditions, only the top 5% of the Zacks-covered stocks get a 'Strong Buy' rating and the next 15% get a 'Buy' rating.

Kevin Simzer, chief operating officer at Trend Micro, shared a firsthand experience with me that emphasizes this shift. At a CISO roundtable just nine months ago, he polled the room—and every single participant was trying to block AI tools. Now? “We’re about to release some new research... and actually, 97% of them are leveraging AI,” Simzer said.