Media Coverage

While attacks from the prolific APT group in China and North Korea continue to make up much of the activity in the region, other nations are using cyber operations as part of their approach to regional conflicts, says Feike Hacquebord, principal threat researcher at cybersecurity firm Trend Micro.

In all, no less than 28 zero-day exploits were demonstrated, and Trend Micro ZDI handed over $1,078,750 to the successful hackers in return for the vulnerability details.

What It Does: Trend Micro offers a comprehensive cybersecurity platform spanning endpoint, email, cloud, OT, and more. It’s all anchored by the Trend Micro Vision One platform.

In this video interview with Information Security Media Group at RSAC Conference 2025, Trend COO Kevin Simzer discussed the impact of trade tariffs on cybersecurity, how data sovereignty is driving on-premises deployments, and cybersecurity skill and talent challenges.

Without a doubt, there is much less eye-rolling when AI gets brought up in a conversation at RSAC this year, according to Kevin Simzer, COO at Trend Micro.

“There is a veil on the front side so we can’t see what they’re working on and what they’re working towards. We only see the results of it when it gets into the wild and actually gets demonstrated against a real live party,” Trend Micro's Dustin Childs said.

Cybersecurity company Trend Micro also put out research on this front. It found that there are detailed online forums in Russia where criminals were offering to carry out physical attacks for the highest bidder.

Trend Micro researchers detailed an emerging ransomware campaign by a new group known as "CrazyHunter" that is targeting critical sectors in Taiwan.

"I can say that, having been in this industry for longer than CVEs themselves, it won't be good," Dustin Childs, head of threat awareness at Trend Micro's Zero Day Initiative, told The Register.

Security researchers at Trend Micro are flagging problems with Nvidia’s patch for a critical vulnerability in the Nvidia Container Toolkit, warning that the incomplete mitigation leaves enterprises exposed to container escape attacks.

And although regular agentic AI is still at a very early stage—and criminal or malicious use of agentic AI even more so—it’s even more of a Wild West than the LLM field was two years ago, says Vincenzo Ciancaglini, a senior threat researcher at the security company Trend Micro.

Trend Micro has open sourced its cybersecurity large language model (LLM) and artificial intelligence (AI) agent to help organizations automate threat detection.

Trend Micro rolled out autonomous agents and its own AI brain to customers last year.

According to Trend Micro documentation, the data extortion gang was seen launching exploits against the defect in the Microsoft Management Console (MMC) framework to execute malicious code and exfiltrate data from targeted systems.

Cybercriminals working on behalf of at least six nation-states are actively exploiting a zero-day vulnerability in Microsoft Windows to commit espionage, steal data and cryptocurrency, according to Trend Micro researchers.

As security researchers Peter Girnus and Aliakbar Zahravi with Trend Micro's Zero Day Initiative (ZDI) reported today, Microsoft tagged it as "not meeting the bar servicing" in late September and said it wouldn't release security updates to address it.

Researchers from the security firm Trend Micro collaborated with Human on the Badbox 2.0 investigation, particularly focusing on the actors behind the activity.

The company says Trend Cybertron is the first specialised cybersecurity large language model (LLM) of its kind that leverages AI-driven intelligence, historical threat data and predictive analytics to protect organisations from emerging risks.

The world is worried about deepfakes. Research conducted in the U.S. and Australia finds that nearly three-quarters of respondents feel negatively about them, associating the AI-generated phenomenon with fraud and misinformation. But in the workplace, we’re more likely to let our guard down.

The fight against shadow AI mirrors past efforts to control shadow IT and unauthorized cloud applications, Shannon Murphy, senior manager of global security and risk strategy at Trend Micro, told Axios.

Generally, monitoring for cryptojacking attacks can be difficult, said Jon Clay, vice president of threat intelligence at Trend Micro. “One of the things we see a lot of is, they come in, they drop their miners, and then they wipe their tracks of everything they did prior to that. So it’s very difficult,” he said. “They also wipe out and turn off a lot of the security products that are running on these machines.”

A Trend Micro spokesperson shared a comment from the company's research team, which noted that based on currently available details, the issue could be related to a high volume of traffic from either a surge in popularity for DeepSeek's service or a targeted DDoS attack.

The incidents highlight that organizations are aiming to silence researchers, rather than engage publicly with them, says Dustin Childs, the head of threat awareness and the Zero Day Initiative at Trend Micro, which maintains a third-party bug bounty program.

Researchers at the this year's Pwn2Own Automotive hacking contest successfully hacked Tesla's wall connector electric vehicle (EV) charger.

Pwn2Own is a competitive hacking event with a long and noble history stretching back to 2007; that it attracts some of the best ethical hackers and security researchers on the planet is a testament to its reputation.