7247 matches found
Trend Micro IMSVA Management Portal Authentication Bypass (CVE-2018-3609)
An authentication bypass exists in Trend Micro InterScan Mail Security Virtual Appliance. The vulnerability is due to insufficient protection of a log file containing session credentials for authenticated users...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 23, 2018
I was having dinner with friends recently and one of the newer members of the group asked me what I did for a living. I told him that I worked for a cybersecurity company and his reply was, “I don’t need to worry about security – I have a MacBook.” I thought that at any second, Rod Serling was...
The New Mobile Threat Landscape, circa 2017 to 2018
Submitted by Ian Grutze If mobile threats diversified and expanded in 2016, they matured in 2017. Mobile ransomware continued to rear its head, burgeoning into the platform’s most prevalent threat. Simple screen lockers, for instance, evolved into file-encrypting malware, some of which even seeme...
Delta Electronics PMSoft
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION : Low skill level to exploit. Vendor : Delta Electronics Equipment : PMSoft Vulnerabilities : Multiple Stack-Based Buffer Overflow vulnerabilities 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause the application to crash;...
Graffiti in the digital world: How hacktivists use defacement
Activists have been featured more frequently in the news lately, with marches shining the spotlight on women's rights and bringing about an end to gun violence, to name a few. However, the real world isn't the only place where activism happens. The digital realm has become a critical space for...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 16, 2018
It was a crazy week at this year’s RSA Conference in San Francisco. I always try to get a quick view of the floor to see companies old and new exhibit their wares. Unfortunately, work never sleeps when you attend a conference, and the shortage of seating at this year’s event left many, including...
Trend Micro Maximum Security tmnciesc Buffer Overflow Elevation of Privilege Vulnerability
Trend Micro Maximum Security is multi-device virus, malware protection software. An elevation of privilege vulnerability exists in Trend Micro Maximum Security that could allow an attacker to execute low-privilege code on the target system...
Trend Micro Maximum Security tmnciesc buffer overflow elevation of privilege vulnerability (CNVD-2018-09710)
Trend Micro Maximum Security is multi-device virus, malware protection software. An elevation of privilege vulnerability exists in Trend Micro Maximum Security that stems from a lack of proper user data validation in the tmnciesc.sys driver processing IOCTL 0x222060, which could allow an attacker...
Trend Micro Maximum Security tmnciesc Out-of-Bounds Read Information Disclosure Vulnerability
Trend Micro Maximum Security is multi-device virus, malware protection software. Trend Micro Maximum Security suffers from an information disclosure vulnerability that originates from a lack of proper user data validation in the tmnciesc.sys driver processing IOCTL 0x222814, which could allow an...
Endpoint Security Testing Matters: New NSS AEP Test Results
NSS Labs, Inc. has just released the 2018 edition of their Advanced Endpoint Protection testing, and Trend Micro’s endpoint solutions have performed very well, resulting in a “recommended” rating. We had strong performance on “security effectiveness,” meaning that we detected and blocked threats...
Trend Micro Control Manager Directory Traversal In IMPORTFILE.PHP - Ver2
A directory traversal vulnerability exists in Trend Micro. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Trend Micro Control Manager External Entity Information Disclosure - Ver2
An information disclosure vulnerability exists in Trend Micro. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Google Play Boots Three Malicious Apps From Marketplace Tied to APTs
Two advanced persistent threat groups managed to sneak apps onto the Google Play marketplace earlier this year. Both were designed to conduct surveillance on targets located in the Middle East region, according to Lookout security researchers. One of the groups, identified as APT-C-23 also known ...
Sharing the Journey to GDPR Compliance
Customer data is everything at Trend Micro. As a global cybersecurity leader, protecting customer data is what we do for a living, which is why it’s important for us to put into practice what we talk to our customers about. As a demonstration of our commitment to protecting our millions of...
Independent lab tests again prove the excellence of Trend Micro Mobile Security for Android
Submitted by Ian Grutze For the fourth year in a row, as shown in AV Comparatives’ Anti-Virus Comparative Android Test 2018 - January 2018, Trend Micro Mobile Security for Android shows it provides 100% protection against malware. In this independent lab test, more than 200 mobile security produc...
Trend Micro Maximum Security tmnciesc Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...
Trend Micro Maximum Security tmnciesc Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers disclose sensitive information on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...
Trend Micro Maximum Security tmnciesc Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...
