Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Our analysis of an active KongTuke campaign deploying modeloRAT — malware capable of reconnaissance, command execution, and persistent access — through compromised WordPress sites and fake CAPTCHA lures shows that the group still operates this delivery chain in parallel with the newer CrashFix technique.
The Larva-24009 threat actor has been active since at least 2023, carrying out phishing email attacks targeting users both in Korea and globally to install malware.
Learn about OpenClaw (a sovereign agent) and how this can be viable for enterprises.
Trend Micro provides a security analysis of OpenClaw, a sovereign agent framework, examining its viability and risks for enterprise deployment. The analysis helps CISOs understand the security implications of adopting agent-based architectures.
Trend Micro's MDR team analyzes an active KongTuke campaign that deploys modeloRAT through compromised WordPress sites using fake CAPTCHA lures. The group continues operating this delivery chain in parallel with the newer CrashFix technique, targeting victims with remote access trojan capabilities.
At [un]prompted 2026, TrendAI™ demonstrated how documents can be used to exploit AI-driven KYC pipelines and introduced FENRIR, an automated system for discovering AI vulnerabilities at scale.