TrendAI

MOUNTAIN VIEW – November 02, 2026 -- Google, Plume, TrendAI, Lumen, HUMAN Security, Synthient and Japan's National Police Agency have taken down X.CPE, a botnet hidden in more than 1.3 million TV set-top boxes across more than 200 countries. Google assesses that disrupting the botnet's command-and-control domains will also cut off access to at least 10 million additional compromised devices.

Malware shipped inside firmware before devices reached subscribers

X.CPE was embedded in device firmware before the set-top boxes were sold. Unlike threats that rely on a user opening an attachment or installing an app, it arrived as part of the device. Subscribers received no consent request, notification or opt-out option.

The malware was built to evade pre-release security checks. Google has since updated its review process and banned the responsible OEM, along with any future subsidiaries or affiliates, from making devices with preloaded Google apps.

Tokyo – October 19, 2026 -- Trend Micro (TSE: 4704) plans to make available up to ¥10 billion in TrendAI Flex licensing credits under a new Japan Cyber Resilience Initiative, as publicly disclosed cyber incidents in Japan hit 607 in the first nine months of 2026, already above the 594 recorded for all of 2025.

The incident tally comes from TrendAI threat research and is current as of October 9, 2026. Trend Micro notes the figure may change as incidents are disclosed retroactively and further cases are added.

Dallas – October 13, 2026 -- Japan recorded more publicly disclosed cybersecurity incidents in the first nine months of 2026 than in all of 2025, according to TrendAITM Forward-Looking Threat Research data. TrendAITM, the enterprise business unit of Trend Micro Incorporated (TYO: 4704), issued a threat advisory for Japanese organizations after a senior ruling-party lawmaker declared that "cyberspace is in a state of emergency."

September incidents rise 37% from July to 86

September alone saw 86 incidents, about 18% more than August and 37% more than July. Masaaki Taira, who chairs the Liberal Democratic Party's National Cybersecurity Strategy Headquarters, made the emergency statement. The headquarters met on Oct. 9 and called on the government to strengthen public-private cooperation.

Dallas – – September 29, 2026 -- TrendAI, the AI security business unit of Trend Micro Incorporated (TYO: 4704; TSE: 4704), has expanded its integration with Claude's Compliance API inside TrendAI Vision One, giving security teams visibility into AI agent prompts, responses and tool calls alongside existing security telemetry.

Integration now covers Claude Code and Cowork session transcripts

The expanded integration pulls in session records for Claude Code and Cowork from Claude Enterprise, each tied to a verified user. It builds on the initial TrendAI-Anthropic integration announced in June 2026, extending coverage to how engineering and knowledge-work teams use AI agents on a daily basis.

Dallas – – September 29, 2026 -- TrendAI, the enterprise AI security unit of Trend Micro (TYO: 4704; TSE: 4704), has entered private preview with TrendAI Vision One Autonomous Vulnerability Discovery, a service that pairs an agentic AI engine with validation from the Zero Day Initiative (ZDI), described as the world's largest vendor-agnostic bug bounty program.

Engine outperforms rivals on CyberGym leaderboard

The service runs on an agentic system code-named AESIR, built primarily on Anthropic models, and deployed and operated on Amazon Bedrock from Amazon Web Services. When tested against the CyberGym benchmarking framework, the engine scored higher than both single-model and other agentic systems on the leaderboard. TrendAI states internal benchmarking shows its models identify more true-positive vulnerabilities with fewer false positives than leading vulnerability scanning and static analysis tools.

Dallas – September 28, 2026 -- TrendAI, the AI security business unit of Trend Micro Incorporated (TYO: 4704; TSE: 4704), announced support for the NVIDIA Agent Safety Platform, combining hardware-level detection on NVIDIA BlueField DPUs with Zero Day Initiative threat intelligence to help enterprises move autonomous agent fleets from pilot programs into production.

NVIDIA's Agent Safety Platform Enforces Policy Through BlueField-4 DPUs Outside the Agent's Reach

NVIDIA's OpenShell component enforces policy outside an agent's execution environment, preventing it from being prompted away or bypassed, while BlueField-4 DPUs and NVIDIA DOCA add a security layer in silicon that operates independently of the host system. TrendAI positions its platform as the layer that determines what that enforced policy should be, providing visibility into agent behavior and the threat detection needed to act on it.