Connect with us

Technology

Trend Micro Discovers Actively Exploited Vulnerability Affecting Millions of Users: Customers Already Protected

Published

7 months ago

on

Bug allowing attackers to bypass critical protections uncovered by Trend’s Zero Day Initiative

DALLAS, Feb. 13, 2024 /PRNewswire/ — Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cybersecurity leader, announced its discovery of a vulnerability in Microsoft Windows Defender that is actively being exploited by cyberthreat group Water Hydra.

Trend discovered the vulnerability on December 31, 2023 and Trend customers have been automatically protected since January 1, 2024. Organizations are advised to take immediate action in response to the ongoing active exploitation of this vulnerability by cybercriminals.

This (CVE-2024-21412) is an active zero-day vulnerability that was disclosed by Trend Micro’s Zero Day Initiative™ (ZDI) to Microsoft and is being published for the first time today.

Trend protects its customers by issuing virtual patches an average of 51 days before patches are released, including this zero-day for Microsoft. For all other vendors, the average time to actually protect their customers was 96 days. Trend estimates that customers who applied all virtual patches in 2023 saved an average of $1M for their enterprise.

Mark Houpt, CISO, Databank: “We have experienced first-hand the advantages of being under the protective umbrella of Trend Micro. Their unparalleled threat intelligence allows us to be proactively shielded against emerging threats. By implementing their virtual patches, we’ve managed to stay ahead of potential exploit attempts, securing our systems and allowing our customers to have confidence that their systems are secured long before official patches become available. It’s a crucial part of our cybersecurity strategy, giving us peace of mind and significant cost savings in potential breach prevention.”

When a new zero-day vulnerability is discovered, Trend responsibly discloses to the vendor. Trend customers then benefit from virtual patching to protect their systems from exploitation until an official patch can be applied.

Kevin Simzer, COO at Trend: “Zero-day vulnerabilities are an increasingly popular way for threat actors to achieve their goals. This is one reason we invest so deeply in threat intelligence, so we can keep our customers protected months before official vendor patches are released. We are proud to be creating a world with less cyber risk.”

The critical risk is that vulnerabilities can be exploited by bad actors targeting any number of industries or organizations. This one is being actively exploited by the financially motivated APT group to compromise foreign exchange traders participating in the high-stakes currency trading market.

Specifically, it’s used in a sophisticated zero-day attack chain to enable a Windows Defender SmartScreen bypass. Attacks are designed to infect victims with the DarkMe remote access trojan (RAT) for potential data theft and ransomware.

Using layers of defense to mitigate advanced threats, Trend’s intrusion prevention system (IPS) capabilities delivered virtual patching by completely blocking the exploitation of CVE-2024-21412.

Trend Vision One™ automatically identifies critical vulnerabilities and provides visibility into all affected endpoints and their possible impact on an organization’s overall risk. Trend’s proactive approach to risk management reduces the need for last-minute reactive measures on “disclose day” and ensures customers are well-prepared to mitigate risks with confidence.

By contrast, organizations relying solely on a legacy endpoint detection and response (EDR) approach may be left exposed to the threat if their attackers use advanced techniques to avoid detection.

The power of the ZDI, the world’s largest vendor-agnostic bug bounty program, to find and then feed intelligence into virtual patching has become increasingly important in light of two key trends identified by Trend:

The zero-day vulnerabilities discovered by cybercrime groups are increasingly deployed in attack chains by nation-state groups like APT28, APT29, and APT40, broadening their reach.CVE-2024-21412 is itself a simple bypass of CVE-2023-36025, highlighting how easily APT groups can identify and circumvent narrow vendor patches.

To see more on the value of this news, please visit: https://www.youtube.com/watch?v=yY08S4-aICA

To read more technical information on how this occurred, please visit: https://www.trendmicro.com/en_us/

About Trend Micro

Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro’s cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. www.TrendMicro.com.

View original content:https://www.prnewswire.com/news-releases/trend-micro-discovers-actively-exploited-vulnerability-affecting-millions-of-users-customers-already-protected-302061023.html

SOURCE Trend Micro Incorporated

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

On World Cleanup Day 2024, VIAIM’s Newly Launched Service Upgrade Provides Added Multilingual Support and Commitment to Environmental Goals, Helping to Shape a More Sustainable Future

Published

56 mins ago

on

September 20, 2024

By

SINGAPORE, Sept. 20, 2024 /PRNewswire/ — VIAIM,  an AI technology hardware company deeply rooted in the smart office sector, is marking the inaugural World Cleanup Day 2024, which falls on September 20, with the official launch of a service package upgrade, reinforcing its dedication to both innovation and environmental responsibility.

This upgrade introduces Malay and Thai language support, expanding the total number of supported languages from 11 to 13. With these additions, VIAIM is taking another step towards making seamless cross-cultural communication more accessible, especially for users across Southeast Asia. At the same time, the Company continues to align its operations with sustainability efforts, lowering the usage threshold for customers and offering environmentally friendly solutions that contribute to a greener planet.

As part of VIAIM’s latest service package upgrade, users enjoy enhanced features designed to make their work and daily lives more efficient. These include free transcription and translation time, along with increased access to To-do List and Summary functions, providing customers with more comprehensive functionality at no additional cost.

These upgrades not only reflect the brand’s core philosophy of “user-first”, but also emphasize VIAIM’s commitment to continuously enhancing user experiences. Now, users can manage tasks more effectively, saving time and reducing the need for additional services, making their workflow more streamlined and productive.

Beyond product and service innovations, VIAIM remains committed to its environmental goals, aligning with global best practices in environmental, social, and governance (ESG) initiatives. VIAIM believes that, just as its users seek to improve their daily lives through technology, the company must contribute to a better world for future generations.

VIAIM is fully committed to environmental protection and sustainable development through its use of molded pulp, an environmentally friendly material for packaging while maintaining a laser focus on technology upgrades that reflect its customer-centric philosophy. The company utilizes molded pulp, an eco-friendly packaging material, to minimize environmental impact, while its smart office solutions contributes to a paperless workplace, further reducing waste. This dual focus on customer convenience and sustainability enhances the overall value that VIAIM delivers to its global customer base.

“Innovation serves as a breakthrough in technology and is also a cornerstone of environmental and social responsibility,” said TOM, Product Manager of VIAIM. “With our latest service upgrades, we not only improve the user experience but also make it easier for our customers to participate in sustainable practices. By embracing these advancements, users can contribute to environmental preservation, while enjoying the benefits of advanced cross-language support and smarter office tools. VIAIM’s mission is to bridge technological innovation with social responsibility, inviting our customers to join us in creating a brighter, more sustainable future.”

About VIAIM

VIAIM is an innovative technology company in the consumer-goods sector. With a focus on versatile, multimodal interactions, we strive to provide effective solutions that meet users’ specific needs. By harnessing state-of-the-art technology, we bring our visionary ideals to life, helping people embrace the incredible possibilities the Company offers.

CONTACT:
Qian Wang
wangqian@vision-intelligence.tech

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/on-world-cleanup-day-2024-viaims-newly-launched-service-upgrade-provides-added-multilingual-support-and-commitment-to-environmental-goals-helping-to-shape-a-more-sustainable-future-302253841.html

SOURCE VIAIM

Continue Reading

Technology

G42 Collaborates with NVIDIA to Deliver Next-Generation Climate Solutions Using Earth-2

Published

2 hours ago

on

September 20, 2024

By

ABU DHABI, UAE, Sept. 20, 2024 /PRNewswire/ — G42, a leader in AI and cloud computing, today announced that it is partnering with NVIDIA to advance climate technology with a focus on developing AI solutions aimed at dramatically enhancing the accuracy of weather forecasting globally.

The collaboration builds on NVIDIA’s Earth-2, an open platform that accelerates climate and weather predictions with interactive, AI-augmented, high-resolution simulation. G42 and NVIDIA will initially focus on a square-kilometer resolution weather forecasting model that improves the accuracy of meteorological predictions.

Key to this initiative is the establishment of a new operational base and Climate Tech Lab in Abu Dhabi. This state-of-the-art facility will serve as a hub for research and development, driving forward both companies’ commitment to environmental sustainability. This facility will also mobilize the creation of tailored climate and weather solutions that leverage over 100 petabytes of geophysical data assets.

Peng Xiao, Group CEO of G42, said, “This initiative with NVIDIA is a testament to our commitment to applying AI in ways that not only innovate but also solve critical global challenges. Establishing the Earth-2 Climate Tech Lab in Abu Dhabi allows us to leverage our unique capabilities and insights to foster a sustainable future for the world.”

In addition to fostering innovation in climate technology, the initiative will focus on building a robust framework for integrating enhanced weather prediction capabilities with comprehensive data metrics and visualization. This will assist organizations worldwide in achieving their sustainability goals through well-informed, data-driven environmental strategies.

“Our collaboration with G42 marks a pivotal step toward harnessing AI to understand and predict climate phenomena with unprecedented accuracy,” said Jensen Huang, founder and CEO of NVIDIA. “The Earth-2 Climate Tech Lab will propel environmental solutions using the most advanced accelerated computing and AI technology to benefit millions of people around the world.”

By uniting G42’s AI expertise with NVIDIA’s computational acumen, this partnership aims to deliver transformative climate solutions that combine scientific accuracy with real-world applicability, driving impactful change across industries and ecosystems.

About G42

G42 is a technology holding group, a global leader in creating visionary artificial intelligence for a better tomorrow. Born in Abu Dhabi and operating worldwide, G42 champions AI as a powerful force for good across industries. From molecular biology to space exploration and everything in between, G42 realizes exponential possibilities, today.
To know more visit www.g42.ai.

Media contacts
Media and PR Team, G42
media@g42.ai

View original content:https://www.prnewswire.co.uk/news-releases/g42-collaborates-with-nvidia-to-deliver-next-generation-climate-solutions-using-earth-2-302253818.html

Continue Reading

Technology

Kawasaki and CB&I Sign Strategic Collaborative Agreement for Promoting Commercial-Use Liquefied Hydrogen Supply Chain

Published

3 hours ago

on

September 20, 2024

By

HOUSTON, Sept. 19, 2024 /PRNewswire/ — Kawasaki Heavy Industries, Ltd. (Kawasaki) and CB&I, a wholly owned unrestricted subsidiary of McDermott, announced today their signing of a strategic agreement for promoting a commercial-use liquefied hydrogen (LH2) supply chain and realizing a zero-carbon-emission society. The signing ceremony took place at Gastech Exhibition & Conference in Houston on September 18, 2024.

“We are very pleased for this opportunity to build and launch a commercial liquefied hydrogen supply chain in cooperation with CB&I,” said Motohiko Nishimura, President, Energy Solutions & Marine Engineering Company, Kawasaki Heavy Industries, Ltd. “By taking advantage of both companies’ strengths and specialized know-how, we aim to cost down hydrogen, strengthen hydrogen supply chain competitiveness, and accelerate the transition to a zero-carbon society.”

Both companies will use their specialized know-how to provide infrastructure that will enable commercial-scale international LH2 supply chains in order to help achieve carbon-neutrality. By leveraging our combined expertise to deliver large-scale LH2 infrastructure solutions, CB&I and Kawasaki are removing barriers, driving down costs and enhancing scalability across the entire supply chain.

“This strategic partnership represents a significant advancement in liquid hydrogen storage capabilities,” said Mark Butts, Senior Vice President of CB&I. “Our technical expertise and extensive experience in liquid hydrogen storage position us at the forefront of the energy transition, delivering reliable storage solutions and executing projects worldwide with proven success.”

Under this agreement, the companies will provide infrastructure to advance the global realization of a sustainable energy economy and meet decarbonization targets. This collaboration will reduce LH2 infrastructure costs and contribute to more widespread use of this clean and efficient energy source.

About CB&I
CB&I is the world’s leading designer and builder of storage facilities, tanks, and terminals. With more than 60,000 structures completed throughout its 130-year history, CB&I has the global expertise and strategically located operations to provide its customers world-class storage solutions for even the most complex energy infrastructure projects. CB&I is a wholly owned unrestricted subsidiary of McDermott. To learn more, visit www.cbi.com.

About McDermott
McDermott is a premier, fully-integrated provider of engineering and construction solutions to the energy industry. Our customers trust our technology-driven approach engineered to responsibly harness and transform global energy resources into the products the world needs. From concept to commissioning, McDermott’s innovative expertise and capabilities advance the next generation of global energy infrastructure—empowering a brighter, more sustainable future for us all. Operating in over 54 countries, McDermott’s locally-focused and globally-integrated resources include more than 30,000 employees, a diversified fleet of specialty marine construction vessels and fabrication facilities around the world. To learn more, visit www.mcdermott.com.

About Kawasaki Heavy Industries, Ltd.
Kawasaki Heavy Industries, Ltd. is general engineering manufacturer with over 125 years of experience manufacturing products spanning land, sea and air. Kawasaki established the Kawasaki Group’s new vision statement, “Group Vision 2030: Trustworthy Solutions for the Future,” and is focusing on three fields, “A Safe and Secure Remotely-Connected Society,” “Near-Future Mobility,” and “Energy and Environmental Solutions” in order to provide solutions for social issues. For “Energy and Environmental Solutions” in particular, by securing the technology necessary for the entire supply chain (for production, transportation, storage and utilization) ahead of the rest of the world, Kawasaki aims to bring about a society that utilizes hydrogen, the ultimate clean energy that emits no carbon dioxide when used. To learn more, visit https://global.kawasaki.com/en.

Forward-Looking Statements
McDermott cautions that statements in this communication which are forward-looking, and provide other than historical information, involve risks, contingencies and uncertainties. These forward-looking statements include, among other things, statements about the expected benefits from the collaboration agreement discussed in this press release.  Although we believe that the expectations reflected in those forward-looking statements are reasonable, we can give no assurance that those expectations will prove to have been correct. Those statements are made by using various underlying assumptions and are subject to numerous risks, contingencies and uncertainties, including, among others: adverse changes in the markets in which we operate or credit or capital markets; our inability to successfully execute on contracts in backlog; changes in project design or schedules; the availability of qualified personnel; changes in the terms, scope or timing of contracts, contract cancellations, change orders and other modifications and actions by our customers and other business counterparties; changes in industry norms; actions by lenders, other creditors, customers and other business counterparties of McDermott and adverse outcomes in legal or other dispute resolution proceedings. If one or more of these risks materialize, or if underlying assumptions prove incorrect, actual results may vary materially from those expected. You should not place undue reliance on forward-looking statements. This communication reflects the views of McDermott’s management as of the date hereof. Except to the extent required by applicable law, McDermott undertakes no obligation to update or revise any forward-looking statement.

For media inquiries, please use the contact information below:

Reba Reid
Global Media Relations
+1 281 588 5636
RReid@McDermott.com

Kristi Krupala-Grove
CB&I Media Relations
+1 346 313 9636
KKrupala2@mcdermott.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/kawasaki-and-cbi-sign-strategic-collaborative-agreement-for-promoting-commercial-use-liquefied-hydrogen-supply-chain-302253698.html

SOURCE McDermott International, Ltd

Continue Reading

Trending