Protect Your Online Privacy with the New Trend Micro Zero Browser

In the digital age, your personal data and online behavior is increasingly being tracked whenever you browse, search, watch the news, use social networks, purchase goods, or manage your accounts online. Trend Micro, with nearly 30 years of experience in the security industry, is acutely aware of...

This Week in Security News: Hackers and Cyber Attackers

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, Chili’s parent company – Brinker International – announced that consumer credit and debit card information had been compromised at some...

A Five-Year Journey: How Trend Micro Helped Bring Down Scan4You

Trend Micro has always had a close relationship with law enforcement around the globe, because we believe that only together can we make the world a safer place in which to exchange digital information. As the business of cybercrime continues to grow and evolve, so must our response. That’s why w...

Trend Micro Endpoint Application Control FileDrop Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Endpoint Application Control. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileDrop servlet. When parsing filenames, the process does no...

Adobe Releases Critical Security Updates for Acrobat, Reader and Photoshop CC

Adobe has just released new versions of its Acrobat DC, Reader and Photoshop CC for Windows and macOS users that patch 48 vulnerabilities in its software. A total of 47 vulnerabilities affect Adobe Acrobat and Reader applications, and one critical remote code execution flaw has been patched in...

Dr. Cleaner Review 2018: Is it the Best Mac Cleanup App?

"Why choose Dr. Cleaner?" This is a common question that many people want to ask as there were too many cleanup apps for the Mac and many don't know which one is the best one or safe to use. However, do not simply believe that there are no viruses or adware found on the macOS. Once you download...

Trend Micro Mobile Security Enterprise eas_agent_sync_client_info slink_id SQL Injection (CVE-2017-14078)

An SQL injection vulnerability exists in Trend Micro Mobile Security Enterprise. The vulnerability is due to insufficient validation of the slinkid request parameter with easagentsyncclientinfo action...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 7, 2018

This week marked National Teacher Appreciation Week here in the United States. I was happy to see that many other countries celebrate educators in all the other months of the year. All of us have at least one teacher, instructor or professor who really made a difference in our lives. There are tw...

WebKitGTK+ Memory Corruption / Code Execution Vulnerability

Exploit for windows platform in category dos / poc ------------------------------------------------------------------------ WebKitGTK+ Security Advisory WSA-2018-0004 ------------------------------------------------------------------------ Date reported : May 07, 2018 Advisory ID : WSA-2018-0004...

Trend Micro Maximum Security Multiple Vulnerabilities (May 2018) - Windows

Trend Micro Maximum Security is prone to multiple vulnerabilities. This VT has been deprecated and split into multiple VTs based on vendor advisories: - Trend Micro Maximum Security 12.0 Build 1226 Multiple Vulnerabilities tmka-20066 OID: 1.3.6.1.4.1.25623.1.0.118643 - Trend Micro Maximum Securit...

Trend Micro Internet Security Multiple Vulnerabilities (May 2018) - Windows

Trend Micro Internet Security is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Trend Micro Maximum Security Detection (Windows SMB Login)

Detection of installed version of Trend Micro Maximum Security on Windows. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro Antivirus Plus < 12.0.1226 Multiple Vulnerabilities

Trend Micro Antivirus Plus is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Trend Micro Antivirus Plus Security Detection (Windows SMB Login)

Detection of installed version of Trend Micro Antivirus Plus on Windows. The script logs in via smb, searches for Trend Micro Antivirus Plus in the registry and gets the version from registry. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

Trend Micro Deep Discovery Director Has Multiple Vulnerabilities

Trend Micro Deep Discovery Director is used to detect, analyze and respond to targeted attacks in real time. Trend Micro Deep Discovery Director has multiple vulnerabilities that can be exploited by attackers to access sensitive information, perform unauthorized actions around security...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 30, 2018

When I was little, I discovered the joy of jumping on the bed. While it was fun to jump on the bed, I wanted to make it more challenging so I started to imitate the ski jumpers I had seen during the 1976 Winter Olympics and jump from my parents’ dresser to the bed. I quickly found out there’s a...

Trend Micro Encryption for Email Gateway register2 Client SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary SQL statements on vulnerable installations of Trend Micro Encryption for Email Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exist...

Trend Micro Encryption for Email Gateway formChangePass username SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro Encryption for Email Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

Trend Micro Encryption for Email Gateway LauncherServer DownloadBlackList Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Encryption for Email Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The flaw exists within the...

Trend Micro Smart Protection Server BWListMgmt SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Smart Protection Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of parameters provided to wcs\bwlists\handler.php. The...