Connect with us

Technology

Trend Micro Discovers Actively Exploited Vulnerability Affecting Millions of Users: Customers Already Protected

Published

3 years ago

on

Bug allowing attackers to bypass critical protections uncovered by Trend’s Zero Day Initiative

DALLAS, Feb. 13, 2024 /PRNewswire/ — Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cybersecurity leader, announced its discovery of a vulnerability in Microsoft Windows Defender that is actively being exploited by cyberthreat group Water Hydra.

Trend discovered the vulnerability on December 31, 2023 and Trend customers have been automatically protected since January 1, 2024. Organizations are advised to take immediate action in response to the ongoing active exploitation of this vulnerability by cybercriminals.

This (CVE-2024-21412) is an active zero-day vulnerability that was disclosed by Trend Micro’s Zero Day Initiative™ (ZDI) to Microsoft and is being published for the first time today.

Trend protects its customers by issuing virtual patches an average of 51 days before patches are released, including this zero-day for Microsoft. For all other vendors, the average time to actually protect their customers was 96 days. Trend estimates that customers who applied all virtual patches in 2023 saved an average of $1M for their enterprise.

Mark Houpt, CISO, Databank: “We have experienced first-hand the advantages of being under the protective umbrella of Trend Micro. Their unparalleled threat intelligence allows us to be proactively shielded against emerging threats. By implementing their virtual patches, we’ve managed to stay ahead of potential exploit attempts, securing our systems and allowing our customers to have confidence that their systems are secured long before official patches become available. It’s a crucial part of our cybersecurity strategy, giving us peace of mind and significant cost savings in potential breach prevention.”

When a new zero-day vulnerability is discovered, Trend responsibly discloses to the vendor. Trend customers then benefit from virtual patching to protect their systems from exploitation until an official patch can be applied.

Kevin Simzer, COO at Trend: “Zero-day vulnerabilities are an increasingly popular way for threat actors to achieve their goals. This is one reason we invest so deeply in threat intelligence, so we can keep our customers protected months before official vendor patches are released. We are proud to be creating a world with less cyber risk.”

The critical risk is that vulnerabilities can be exploited by bad actors targeting any number of industries or organizations. This one is being actively exploited by the financially motivated APT group to compromise foreign exchange traders participating in the high-stakes currency trading market.

Specifically, it’s used in a sophisticated zero-day attack chain to enable a Windows Defender SmartScreen bypass. Attacks are designed to infect victims with the DarkMe remote access trojan (RAT) for potential data theft and ransomware.

Using layers of defense to mitigate advanced threats, Trend’s intrusion prevention system (IPS) capabilities delivered virtual patching by completely blocking the exploitation of CVE-2024-21412.

Trend Vision One™ automatically identifies critical vulnerabilities and provides visibility into all affected endpoints and their possible impact on an organization’s overall risk. Trend’s proactive approach to risk management reduces the need for last-minute reactive measures on “disclose day” and ensures customers are well-prepared to mitigate risks with confidence.

By contrast, organizations relying solely on a legacy endpoint detection and response (EDR) approach may be left exposed to the threat if their attackers use advanced techniques to avoid detection.

The power of the ZDI, the world’s largest vendor-agnostic bug bounty program, to find and then feed intelligence into virtual patching has become increasingly important in light of two key trends identified by Trend:

The zero-day vulnerabilities discovered by cybercrime groups are increasingly deployed in attack chains by nation-state groups like APT28, APT29, and APT40, broadening their reach.CVE-2024-21412 is itself a simple bypass of CVE-2023-36025, highlighting how easily APT groups can identify and circumvent narrow vendor patches.

To see more on the value of this news, please visit: https://www.youtube.com/watch?v=yY08S4-aICA

To read more technical information on how this occurred, please visit: https://www.trendmicro.com/en_us/

About Trend Micro

Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro’s cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. www.TrendMicro.com.

View original content:https://www.prnewswire.com/news-releases/trend-micro-discovers-actively-exploited-vulnerability-affecting-millions-of-users-customers-already-protected-302061023.html

SOURCE Trend Micro Incorporated

Related Topics:
Continue Reading

Technology

Kontron Launches Two New KBox F-Series Industrial Computers To Bring Greater Flexibility and Scalability to Industrial Edge Computing

Published

35 minutes ago

on

October 21, 2026

By

TAIPEI, Oct. 21, 2026 /PRNewswire/ — Kontron, a leading global provider of IoT/Embedded Computing Technology (ECT), expands its KBox F-Series with the KBox F-203-RPS and KBox F-204-RPS, two compact industrial computers designed to address diverse requirements in intelligent Industry 4.0, edge computing and industrial IoT applications.

Both systems are powered by 12th, 13th or 14th Gen Intel® Core™ i9/i7/i5/i3 S-Series socket-type processors with a TDP of up to 65 W and support up to 96 GB DDR5 memory, providing a scalable computing foundation for demanding industrial applications requiring flexible performance configuration and long-term deployment.

The KBox F-203-RPS offers two LAN configurations with either two or four GbE ports, allowing customers to select the connectivity level that best fits their applications. The dual-LAN configuration provides an efficient solution for general industrial computing, equipment control and edge applications, while the four-LAN configuration offers additional network connectivity for applications involving multiple devices or network segments, such as machine vision, industrial automation and IoT gateways.

For applications requiring greater system expandability, the KBox F-204-RPS provides one PCIe x16 or two PCIe x8 expansion slots, offering the flexibility to integrate graphics, networking, AI acceleration or other add-on cards according to specific application requirements. With support for up to four 2.5-inch SATA HDDs/SSDs, it also provides extensive storage scalability for data-intensive workloads. These capabilities make the KBox F-204-RPS particularly suitable for industrial edge computing, machine vision, video processing and applications requiring additional functionality or large local data storage.

Together, the KBox F-203-RPS and KBox F-204-RPS enable customers to select the configuration that best matches their requirements, from a slimmer, network-focused industrial computer to a highly expandable edge computing platform.

To learn more about KBox F-203-RPS and KBox F-204-RPS, refer to https://www.kontron.com/en/products/kbox-f-203-rps/p301099 and https://www.kontron.com/en/products/kbox-f-204-rps/p311867.

About Kontron

At Kontron, we champion IoT and Industry 4.0, by creating secure, state-of-the-art solutions that span hardware, software and services. Our approach speeds market entry, reduces the cost of ownership, and offers longevity, ensuring our role as your trusted partner in the integration of smart technologies. For more information, please visit www.kontron.com, dial +886-2-2799-2789 or email SalesAsia@kontron.com.

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/kontron-launches-two-new-kbox-f-series-industrial-computers-to-bring-greater-flexibility-and-scalability-to-industrial-edge-computing-302909761.html

SOURCE Kontron

Continue Reading

Technology

Mouser Electronics Brings Smart Sensing Solutions to PSECE 2026

Published

35 minutes ago

on

October 21, 2026

By

MANILA, Philippines, Oct. 21, 2026 /PRNewswire/ — Mouser Electronics, Inc., the authorized global distributor with the newest electronic components and industrial automation products, announces its participation in the 21st Philippine Semiconductor and Electronics Convention and Exhibition (PSECE 2026) from October 26 to 28 at the SMX Convention Center Manila, Philippines. This event underscores Mouser’s commitment to supporting the region’s growing electronics design community with immediate access to cutting-edge technologies.

Visitors are invited to meet the Mouser team at Booth #110-111 to explore new products and practical design resources. The booth features a live demonstration of Würth Elektronik’s smart sensing and visual indication solutions, integrating environmental and motion sensing with programmable visual feedback and wireless connectivity. This interactive display illustrates how modern devices can detect physical conditions and translate them into clear, immediate visual data, addressing the critical need for reliable intelligence in connected systems.

“As we advance into an era of interconnected intelligence, Mouser remains committed to bridging the gap between cutting-edge components and real-world application,” said Daphne Tien, Vice President of Marketing and Business Development at Mouser APAC. “Our presence at PSECE 2026 underscores our dedication to empowering engineers with the tools they need to innovate. We look forward to fostering a vibrant ecosystem where technology translates into tangible progress for the Philippines and beyond.”

Mouser’s participation highlights its strategic objective to strengthen ties with local partners and accelerate the adoption of advanced semiconductor technologies. By providing a platform for knowledge exchange, the company aims to help design communities turn promising prototypes into practical applications.

Attendees will have the opportunity to gather invaluable insights, learn industry best practices, and connect with professionals from across the region. The booth also features interactive activities where visitors can win premium gadgets and engineering tools, making innovative technology more approachable for everyone.

To learn more about Mouser’s presence at PSECE 2026, visit https://www.mouser.ph/psece-seipi/. 

For more Mouser news and our latest new product introductions, visit https://www.mouser.com/newsroom/.

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/mouser-electronics-brings-smart-sensing-solutions-to-psece-2026-302914806.html

SOURCE Mouser Electronics

Continue Reading

Technology

Workato Launches Self-Serve Platform in Singapore, Opening Enterprise AI to a Broader Community of Builders

Published

35 minutes ago

on

October 21, 2026

By

New offering gives developers, students, and customers access to the full power of Workato’s enterprise-grade engine to build AI agents and MCP servers

SINGAPORE, Oct. 21, 2026 /PRNewswire/ — Workato®, the leading Control and Execution Platform for Enterprise AI, today announced the launch of a new self-service offering that gives customers, developers, and students across Asia access to the Workato platform to govern and scale their AI initiatives, including building and productionizing AI agents and MCP servers.

Making AI accessible has been at the heart of Workato’s mission the past several years. Through the AI Institute Alliance, unveiled in September 2025, Workato partnered with leading institutes of higher learning across Singapore, including Nanyang Polytechnic, Republic Polytechnic, Temasek Polytechnic, Singapore Polytechnic, Ngee Ann Polytechnic, the Singapore University of Social Sciences, and the National University of Singapore. The initiative equipped students and educators with automation and AI skills.

The AI Lab, which opened a year later, extended that commitment further into the public sector through its partnership with EDB, and into inclusive hiring through SG Enable.

The newly launched self-serve platform will provide users access to:

A free account to start building immediately, with the option to upgrade to a paid plan, no contract required, as projects growThe ability to build recipes, Agents/Genies, and MCP servers directly on the platformThe same governed, enterprise-grade engine that powers Workato’s largest deploymentsA path built for independent developers, students, and small teams, as well as large enterprises

Since launching in 2026 in North America, Workato has seen rapid growth in the builder community. The platform is enterprise grade, but free to get started. As builders solve problems for their business, they can grow by upgrading to a paid plan. With this launch in Singapore, Workato is making an investment in the local builder community.

“The next era of AI won’t be defined by who has access to intelligence, but by who can turn it into action. We’re putting the same enterprise-grade power trusted by the world’s largest companies into the hands of every builder. We want everyone to be able to transform how their business operates,” said Rishi Mallik, Chief Growth Officer, Workato. 

Workato showcased its self-serve platform and broader community initiatives at World of Workato (WOW) 2026 in Singapore.

Builders can sign up now at https://app.trial.workato.com/users/sign_up_trial?utm_content=sg_wow2026.

About Workato

Workato is the leading Control and Execution Platform for Enterprise AI — the neutral platform enterprises trust to put AI to work across their business. Workato unifies data, applications, and processes into a single platform so AI can reliably orchestrate business processes in production at enterprise scale. Built on more than a decade of running mission-critical processes for over half the Fortune 500 — including Nasdaq, Cisco, Vodafone, Atlassian, and Lucid Motors — Workato turns over 17,000 enterprise systems AI needs to act on into one governed execution layer. For more information, visit workato.com.

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/workato-launches-self-serve-platform-in-singapore-opening-enterprise-ai-to-a-broader-community-of-builders-302914795.html

SOURCE Workato

Continue Reading

Trending