CVE-2020-8607: Improper Input Validation

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or...

USN-4452-1 libvirt vulnerability

Trent Shea working with Trend Micro´s Zero Day Initiative, discovered that the libvirt package set incorrect permissions on the UNIX domain socket. A local attacker could use this issue to access libvirt and escalate privileges...

USN-4452-1: libvirt vulnerability

Trent Shea working with Trend Micro´s Zero Day Initiative, discovered that the libvirt package set incorrect permissions on the UNIX domain socket. A local attacker could use this issue to access libvirt and escalate privileges...

ESG Findings on Trend Micro Cloud-Powered XDR Drives Monumental Business Value

This material was published by ESG Research Insights Report, Validating Trend Micro’s Approach and Enhancing GTM Intelligence, 2020. The post ESG Findings on Trend Micro Cloud-Powered XDR Drives Monumental Business Value appeared first on...

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) Multiple Vulnerabilities (000253095)

The Trend Micro InterScan Web Security Virtual Appliance is affected by multiple vulnerabilities : - A path traversal vulnerability exists in the Apache Solr application due to improper validation of a user-supplied path prior to using it in file operations when parsing the file parameter in an...

Trend Micro InterScan Web Security Virtual Appliance Detection

Binary data trendmicroiwsvadetect.nbin...

How to Secure Your Azure Container Instances

Want to protect your Azure Container Instances? Chuck Losh, Solutions Architect, gives you all the steps how with Trend Micro Cloud One™ – Application Security and Trend Micro Cloud One™ – Container Security...

Unauthorized Access Vulnerability in Micro Sugar Android APP of Shanghai Geping Information Technology Co.

The Micro Sugar app is a mobile app that helps users manage their blood sugar. An unauthorized access vulnerability exists in Shanghai Geping Information Technology Co.'s Micro Sugar Android app, which can be exploited by attackers to obtain sensitive information...

Cleaner One Pro Speeds Up Your Mac: Part 2

In Part 1 of this blog, we introduced Trend Micro Cleaner One Pro, a one-stop shop to help you speed up your Mac, highlighting the Quick Optimizer, the Main Console, and the Cleaning Tools. In Part 2, we resume the discussion of how to make your Mac run faster with the remaining Cleaner One Pro...

Trend Micro Multiple Products Directory Traversal (CVE-2020-8470)

A directory traversal vulnerability exists in Trend Micro Apex One and OfficeScan. The vulnerability is due to improper validation of user-supplied file name in the request...

How to Best Secure Your Azure Container Registry

Securing your container registry is critical. Read along as we take a look at the native Microsoft® Azure® container protection in Azure Security Center versus Trend Micro Cloud One™ – Container Security to see what's best for your security needs...

This Week in Security News: Trend Micro Research Discovers Cybercriminal Turf War on Routers and a Massive Twitter Breach Compromises Some of the World’s Most Prominent Accounts

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about Trend Micro’s report on the botnet battle for IoT territory and how attacker groups are trying to gain control of vulnerable...

Trend Micro Security 2020 Code Issue Vulnerability

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. A security vulnerability exists in Trend Micro Secuity 2020 16.0.0.1146 and prior versions. The vulnerability arises from a failure of a network system or product to properly filter specific elements o...

CVE-2020-15602

An untrusted search path remote code execution RCE vulnerability in the Trend Micro Secuity 2020 v16.0.0.1146 and below consumer family of products could allow an attacker to run arbitrary code on a vulnerable system. As the Trend Micro installer tries to load DLL files from its current directory...

CVE-2020-15603

An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...

CVE-2020-15603

An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...

Memory corruption

An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...

Remote code execution

An untrusted search path remote code execution RCE vulnerability in the Trend Micro Secuity 2020 v16.0.0.1146 and below consumer family of products could allow an attacker to run arbitrary code on a vulnerable system. As the Trend Micro installer tries to load DLL files from its current directory...

CVE-2020-15603

CVE-2020-15603 affects Trend Micro Security (Consumer) Driver in the 2020 suite (v16.0.0.1302 and below). The vulnerability is an out-of-bounds/invalid memory read that could allow a local user to manipulate the driver to perform a system call on an invalid address, potentially crashing the syste...

CVE-2020-15603

An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...