Earth Simnavaz (aka APT34) Levies Advanced Cyberattacks Against Middle East

Trend Micro's investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to sectors in the Middle East...

Earth Simnavaz (aka APT34) Levies Advanced Cyberattacks Against UAE and Gulf Regions

Trend Micro's investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to critical sectors in the UAE...

PT-2025-25265

Name of the Vulnerable Software and Affected Versions Trend Micro Endpoint Encryption versions prior to 6.0.0.4013 Description An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected...

PT-2025-25264

Name of the Vulnerable Software and Affected Versions Trend Micro Endpoint Encryption affected versions not specified Description A SQL injection issue allows an attacker to escalate privileges on affected installations. To exploit this, an attacker must first obtain the ability to execute...

PT-2025-25266

Name of the Vulnerable Software and Affected Versions Trend Micro Endpoint Encryption TMEE affected versions not specified Description The issue is related to insufficient input validation in the PolicyServerWindowsService class of the Trend Micro Endpoint Encryption TMEE PolicyServer data...

Harnessing AI for Enhanced Security

A deep-dive into how AI-driven solutions from Trend Micro leveraging the NVIDIA AI Enterprise software platform are elevating security across critical industries...

PT-2025-22430

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central affected versions not specified Description The issue concerns a Local File Inclusion Remote Code Execution vulnerability in the Trend Micro Apex Central widget, specifically affecting the getObjWGFServiceApiByApiName...

PT-2025-22432

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central affected versions not specified Description The issue is related to the getBlock function in Trend Micro Apex Central's security monitoring and management tool, which fails to neutralize special elements in its output...

PT-2025-22431

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central modTMCM affected versions not specified Description The issue is related to uncertain behavior of a function due to a mismatch of parameter values in the modTMCM widget of Trend Micro Apex Central. This can be exploite...

PT-2025-25239

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One Damage Cleanup Engine affected versions not specified Description A link following issue could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute...

MDR in Action: Preventing The More_eggs Backdoor From Hatching

Trend Micro MDR Managed Detection and Response team promptly mitigated a moreeggs infection. Using Vision One, MDR illustrated how Custom Filters/Models and Security Playbook can be used to automate the response to moreeggs and similar threats...

Trend IQ3xcite 安全漏洞

Trend Micro Trend IQ3xcite is a building management system controller from Trend Micro that uses Ethernet and TCP/IP networking technologies. A security vulnerability exists in Trend IQ3xcite versions v2.31 through v3.05 that stems from vulnerability to a cross-site scripting attack that allows a...

SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

SolarWinds has released fixes to address two security flaws in its Access Rights Manager ARM software, including a critical vulnerability that could result in remote code execution. The vulnerability, tracked as CVE-2024-28991, is rated 9.0 out of a maximum of 10.0 on the CVSS scoring system. It...

Trend Micro Deep Discovery Inspector SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Deep Discovery Inspector. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default. The...

Trend Micro Deep Discovery Inspector SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Deep Discovery Inspector. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default. The...

PT-2024-32273 · Trend Micro · Trend Micro Deep Discovery Inspector

Name of the Vulnerable Software and Affected Versions: Trend Micro Deep Discovery Inspector versions 5.8 and above Description: A vulnerability in Trend Micro Deep Discovery Inspector could allow an attacker to disclose sensitive information from affected installations. The attacker must first...

Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

Malicious actors are likely leveraging publicly available proof-of-concept PoC exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks. The activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released f...

CVE-2024-28990

SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...

CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability

SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...

CVE-2024-28990

SolarWinds ARM contains a hard-coded credential authentication bypass (CVE-2024-28990) that could allow access to the RabbitMQ management console. The vulnerability affects ARM versions prior to 2024.3.1, and remediation is available in ARM 2024.3.1 (as referenced by multiple sources). No exploit...