PT-2025-25237 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: The issue is related to an uncontrolled search path vulnerability in the Data Loss Prevention module, which could allow an attacker to inject malicious code. This could lead to...

Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk

The China-linked advanced persistent threat APT group codenamed APT41 is suspected to be using an "advanced and upgraded version" of a known malware called StealthVector to deliver a previously undocumented backdoor dubbed MoonWalk. The new variant of StealthVector – which is also referred to as...

PT-2024-28663 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. To exploit this vulnerability, an...

Trend Micro Apex One modOSCE SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is required to exploit this vulnerability. The specific flaw exists within the client management functionality. The issue results from the lack of proper validati...

The vulnerability of the ApexOne Security Agent for antivirus software from Trend Micro’s Apex One and Apex One as a Service allows attackers to execute arbitrary code and gain elevated privileges.

The vulnerability of the ApexOne Security Agent in antivirus software products Trend Micro Apex One and Apex One as a Service is related to deficiencies in access control for the Suspect folder. Exploiting this vulnerability can allow attackers to execute arbitrary code and increase their...

mySCADA myPRO

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : mySCADA Equipment : myPRO Vulnerability : Use of Hard-coded Password 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to remotely execute code on the...

ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Impact This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. Patches The algorithm to detect SQL injection has been improved. Workarounds None. References - https://github.com/parse-community/parse-server/security/advisories/GHSA-c2hr-cqg6-8j6r -...

AI Pulse: Siri Says Hi to OpenAI, Deepfake Olympics & more

AI Pulse is a new blog series from Trend Micro on the latest cybersecurity AI news. In this edition: Siri says hi to OpenAI, fraud hogs the AI cybercrime spotlight, and why the Paris Olympics could be a hotbed of deepfakery...

The vulnerability of the Trend Micro VPN Proxy One Pro network software lies in its ability to delete arbitrary files from the system, allowing attackers to increase their privileges.

The vulnerability of the Trend Micro VPN Proxy One Pro network software is related to the possibility of deleting arbitrary files from the system. Exploiting this vulnerability can allow a hacker to increase their privileges...

Attackers in Profile: menuPass and ALPHV/BlackCat

To test the effectiveness of managed services like our Trend Micro managed detection and response offering, MITRE Engenuity™ combined the tools, techniques, and practices of two globally notorious bad actors: menuPass and ALPHV/BlackCat. This blog tells the story of why they were chosen and what...

Omdia Report: Trend Disclosed 60% of Vulnerabilities

The latest Omdia Vulnerability Report shows Trend MicroTM Zero Day InitiativeTM ZDI spearheaded 60% of 2023 disclosures, underscoring its role in cybersecurity threat prevention...

New Threat Actor 'Void Arachne' Targets Chinese Users with Malicious VPN Installers

Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer MSI files for virtual private networks VPNs to deliver a command-and-control C&C framework called Winos 4.0. "The campaign also promotes compromised...

Not Just Another 100% Score: MITRE ENGENIUTY ATT&CK

The latest MITRE Engenuity ATT&CK Evaluations pitted leading managed detection and response MDR services against threats modeled on the menuPass and BlackCat/AlphV adversary groups. Trend Micro achieved 100% detection across all 15 major attack steps with an 86% actionable rate for those steps—...

Not Just Another 100% Score: MITRE ENGENUITY ATT&CK

The latest MITRE Engenuity ATT&CK Evaluations pitted leading managed detection and response MDR services against threats modeled on the menuPass and BlackCat/AlphV adversary groups. Trend Micro achieved 100% detection across all 15 major attack steps with an 86% actionable rate for those steps—...

Trend Micro Apex One Access Control Error Vulnerability (CNVD-2024-40819)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An access control error vulnerability exists in Trend Micro Apex One, which can be exploited by an attacker to elevate privileges and execute arbitrary code in the system context...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability (CNVD-2024-40821)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A cross-site scripting vulnerability exists in the Trend Micro InterScan Web Security...

Trend Micro Apex One Denial of Service Vulnerability

Trend Micro Apex One is an endpoint protection software from Trend Micro. A denial of service vulnerability exists in Trend Micro Apex One, which can be exploited by attackers to cause a denial of service...

Trend Micro Apex One Security Proxy Link Vulnerability

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a Secure Proxy Link vulnerability that stems from a Secure Proxy Link vulnerability that can be exploited by a local attacker to elevate privileges...

Trend Micro VPN Proxy One Pro Denial of Service Vulnerability

Trend Micro VPN Proxy One Pro is one of the best virtual private network services from Trend Micro. Trend Micro VPN Proxy One Pro suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Trend Micro Apex One Information Disclosure Vulnerability (CNVD-2024-40823)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information in the system context...