PT-2022-15862

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux versions 20 and below Description A directory traversal issue could allow an attacker to read arbitrary files from the file system. The attacker must first obtain...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Cloud One - Workload Security Log4Shell This repo contains a q...

Auto Apply IPS Rules for Solid Cloud Workload Security

Learn how to leverage automated and programmable APIs to quickly scan and secure workloads with high or critical severity IPS rules...

Critical Auth Bypass Bug Found in VMware Data Center Security Product

A critical vulnerability in the VMware Carbon Black Cloud Workload appliance could be exploited to bypass authentication and take control of vulnerable systems. Tracked as CVE-2021-21982, the flaw is rated 9.1 out of a maximum of 10 in the CVSS scoring system and affects all versions of the produ...

Fighting Back in 2021: 4 Best Practices for Security Teams

“Attacks these days don’t have a natural beginning or ending. For an adversary, every attack is an opportunity to learn something that can then be used against additional organizations.” -- Greg Foss, Senior Cybersecurity Strategist, VMware Security Business Unit. Attackers versus defenders will...

Defining Cloud Workload Protection

Organizations are now turning to an increasingly hybrid cloud infrastructure model to support remote workforces, a trend that has accelerated significantly amid the recent global health crisis. This presents a new challenge as cloud environments both private and public require a purpose-built...

Countering a Home Invasion: Modernizing Threat Hunting Best Practices

The recently released VMware Carbon Black Global Incident Threat Report found that incidents of counter incident response IR are occurring in 82 percent of IR engagements. Counter IR involves several tactics, which include: disabling anti-malware scan interface, clearing/deleting logs, using...

Crossing the Narrow Sea

Tom Kellermann, Head of Cybersecurity Strategy at VMware and Member of the Cyber Investigations Advisory Board of the United States Secret Service. “The Greatest trick the devil ever pulled was to convince the world he didn’t exist.” -Keyser Sose Cyberspace is not a pacific environment. According...

Integrate Security into Your GCP with Google Cloud SDK

Dive into this how to guide on integrating Trend Micro Cloud One™ – Workload Security with Google Cloud Platform™...

Akamai Identified as a Leader Among Zero Trust Providers by Independent Research Firm

We are pleased to share that Akamai has been identified as a Leader in The Forrester Wave™: Zero Trust eXtended Ecosystem Platform Providers, Q3 2020. In the report, Forrester evaluated how each vendor's portfolio maps and delivers on specific components of the Zero Trust eXtended ZTX framework...

Lock and Code S1Ep12: Pinpointing identity and access management’s future with Chuck Brooks

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chuck Brooks, cybersecurity evangelist and adjunct professor for Georgetown University’s Applied Intelligence Program and graduate Cybersecurity Programs...

Cloud workload security: Should you worry about it?

Due to the increasing use of the cloud, organizations find themselves dealing with hybrid environments and nebulous workloads to secure. Containerization and cloud-stored data have provided the industry with a new challenge. And while you can try to make the provider of cloud data storage...

Automatic Visibility And Immediate Security with Trend Micro + AWS Control Tower

Things fail. It happens. A core principle of building well in the AWS Cloud is reliability. Dr. Vogels said it best, “How can you reduce the impact of failure on your customers?” He uses the term “blast radius” to describe this principle. One of the key methods for reducing blast radius is the AW...

Protect Cloud Workloads with Azure Sentinel

Looking for SIEM and SOAR integration for your Trend Micro Cloud One™ – Workload Security investment? Learn how you can get Azure Sentinel capabilities added to Workload Security and how this integration can create a more valuable solution...

Bringing Intrinsic Security to Containers: VMware Acquires Octarine

UPDATE: On May 27, 2020 VMware officially closed its acquisition of Octarine. The blog post below has been amended to reflect that announcement. Today is a very exciting day for VMware and for our customers as we announce our acquisition of Octarine, whose innovative security platform for...

Riding another wave of success for our multi-layered detection and response approach

The corporate endpoint is a constant battle between cybersecurity white hats and criminal attackers. According to one study from the Ponemon Institute, 68% of organizations were victims of an attack on the endpoint in 2019. The risks and costs associated with undetected threats are immeasurable...

Akamai Identified As A Strong Performer Among Zero Trust eXtended Ecosystem Providers By Independent Research Firm

We are pleased to share that today Akamai has been cited as a Strong Performer in The Forrester Wave™: Zero Trust eXtended Ecosystem Providers, Q4 2018 evaluation. In the report, Forrester evaluated how each vendor's portfolio maps and delivers on specific components of the ZTX framework. Akamai...