Media Coverage

After the zero-day vulnerabilities are exploited and reported during Pwn2Own, vendors have 90 days to develop and release security patches before Trend Micro's Zero Day Initiative publicly discloses them.

$380,000 paid out on the first day of Pwn2Own Automotive 2025 for exploits targeting car infotainment units, operating systems, and chargers.

The gang's operator was banned from popular hacker forums Exploit and XSS, making it difficult for him to recruit new members, according to a Trend Micro report.

“Why do people drink one soda over another? Because the brand is so strong,” says Robert McArdle, a director on Trend Micro’s cybercrime research team at Trend Micro, which helped in the investigation. “And if you can destroy that you’re left with soda water.”

“The malicious repository containing the PoC appears to be a fork from the original creator,” Trend Micro said in its report. “In this case, the original Python files were replaced with the executable poc[dot]exe that was packed using UPX.”

From Trend Micro's Jon Clay: Proactive defense needs to be prioritized, because offense is going to stay on the back foot.

Researchers at cybersecurity company Trend Micro first spotted Meta’s VR headsets appearing in its threat intelligence residential proxy data earlier this year, before tracking down that teenagers were using Big Mama to play Gorilla Tag.

Artificial intelligence is transforming cybersecurity by improving threat detection, addressing generative AI risks, and offering tailored solutions for multi-cloud and on-premises environments. "We're thinking about this next wave of innovation with AI as being very disruptive," said Kevin Simzer, COO of Trend Micro.

Trend Micro, a major cybersecurity vendor, has been quietly rolling out a new "AI brain" that gives customers the ability to automate their threat defenses.

Despite the large number of arrests, the operation will likely result only in a brief reduction in cybercriminal activity, as disrupted groups will quickly pivot and recreate their infrastructure, says Stephen Hilt, a senior threat researcher with cybersecurity firm Trend Micro, which also collaborated with authorities on the global intelligence support.

The reach of the China-linked Salt Typhoon gang extends beyond telecommunications giants in the United States, and its arsenal includes several backdoors – including a brand-new malware dubbed GhostSpider – according to Trend Micro researchers.

The gang, tracked as "Water Barghest," has already compromised more than 20,000 IoT devices, including small office and home office (SOHO) routers used by businesses, by using automated scripts to identify and compromise vulnerable devices, according to new research from Trend Micro.

Channel Futures features Louise McEvoy, Vice President of US Channel at Trend.

“On the surface, [CISA’s program is] very good,” Dustin Childs, head of threat awareness in the Zero Day Initiative at Trend Micro, tells CSO. “Every enterprise, especially any large enterprise like the US government, should have some vulnerability disclosure platform.”

Recent research through Trend Micro's Zero Day Initiative (ZDI) has surfaced half a dozen vulnerabilities in the Mazda IVI.

“CISA has a good opportunity to build this out and expand who supports it,” said Jon Clay, vice president of threat intelligence at cyber firm Trend Micro, “as the existing pledges are a very small fraction of developers in the world.”

As part of the operation, which ran from April 1 to August 31, law enforcement agencies in 95 Interpol member countries and private-sector partners such as Group-IB, Trend Micro, Kaspersky, and Team Cymru analyzed roughly 30,000 suspicious IP addresses.

It’s been a headline year for democracy, with over two billion voters casting their ballots in dozens of countries worldwide. But democracy has also never been under greater threat—and in many cases, AI-powered trickery is to blame.

While Synology and QNAP hurried out security updates, vendors are given 90 days until Trend Micro's Zero Day Initiative releases details on bugs disclosed during the contest and usually take their time to release patches.

Risk management and security vendor Trend Micro is looking ahead to 2025 as a year to build upon program enhancements and platform updates that were unveiled throughout 2024.

Trend Micro has acquired TippingPoint IPS and sells it both as a standalone product as well as integrated into their central platform called Vision One. It is available as a virtual machine, a variety of hardware appliances or as a cloud subscription for protecting AWS workloads.

Trend Micro revealed today it will extend an alliance with NVIDIA to include a Morpheus platform that harnesses graphical processor units (GPUs) to apply artificial intelligence (AI) to security operations.

Enter a third study by Trend Micro, a security scam detection app builder. It revealed that a whopping 73% of people think scams have gotten worse in the past year, and almost 80% are worried someone in their family might fall victim.

NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great

Nearly two-thirds of organizations lack 24/7 cybersecurity coverage throughout the year due to staffing shortages, a Trend Micro report published Thursday revealed.