TrendAI Presents Research on Agentic Cybercrime and EV Charging Security at RSAC 2026
Summary
At RSAC 2026, TrendAI researchers discussed proof-of-concept agentic AI cybercrime and security risks at interfaces in EV charging infrastructure, recommending NIST IR 8473 as a unifying framework for vendors.
Key points
- TrendAI researchers described a proposed criminal AI architecture using specialized agents for tasks such as reconnaissance, social engineering, and extortion.
- Proof-of-concept examples showed agentic systems automating ransomware data analysis, personalized extortion messages, and large-scale social engineering.
- A session drawing on Pwn2Own Automotive and VicOne research highlighted vulnerabilities in electric vehicle supply equipment and risks at system interfaces.
- The speakers recommended that EV charging vendors adopt NIST IR 8473 as a framework for reducing systemic cybersecurity risk.
- The article calls for secure-by-design engineering, ongoing vulnerability research, and collaboration across the mobility ecosystem.
Article Details
- Event Type
- TrendAI™ Research presented two sessions at RSAC 2026 on agentic AI-driven cybercrime and cybersecurity risks in electric vehicle charging infrastructure.
- Impact
- The sessions described proof-of-concept agentic systems capable of automating ransomware data analysis, personalized extortion messages, and large-scale social engineering, and highlighted exploitable vulnerabilities and systemic security risks at interfaces across the EV charging ecosystem. No specific real-world victim impact was reported.
People
Philippe Z LinTrendAI™ Senior Threat Researcher; delivered a session on EV charging standards and security.Robert McArdleTrendAI™ Director of Cybercrime Research; co-presented a session on agentic AI cybercrime.Shin LiStaff Threat Researcher at VicOne's Automotive CyberThreat Research Lab; delivered a session on EV charging standards and security.Stephen HiltTrendAI™ Principal Threat Researcher; co-presented a session on agentic AI cybercrime.
Vendors
Trend MicroExtending the research narrative into the cyber-physical domain, Trend Micro subsidiary VicOne presented insights from “NIST 8473 to the Rescue: EV Charging Standards Being Hacked in Pwn2Own,” delivered by Philippe ZVicOneExtending the research narrative into the cyber-physical domain, Trend Micro subsidiary VicOne presented insights from “NIST 8473 to the Rescue: EV Charging Standards Being Hacked in Pwn2Own,” delivered by Philippe Z