Research, News, and Perspectives
Excerpt
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
A packaging error in Anthropic’s Claude Code npm release briefly exposed internal source code. This entry examines how threat actors rapidly weaponized the resulting attention, pivoting an existing AI-themed campaign to spread Vidar and GhostSocks.
Apr 03, 2026
Privacy & Risks
TrendAI Insight: New U.S. National Cyber Strategy
TrendAI reviews the White House National Cyber Strategy, outlining six pillars to strengthen U.S. cybersecurity —from deterrence and regulation to federal modernization, critical infrastr…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Trend Micro on blog.trendmicro.com.
Mentioned in the excerpt
More from Trend Micro18
- Lemon Group’s Cybercriminal Businesses Built on Preinfected DevicesTrend Micro · Published 17 May 2023
- Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures RevealedTrend Micro · Added 14 Oct
- Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux ImplantTrend Micro · Added 2 Sep
- Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential TheftTrend Micro · Published 13 May
