Recent Advisories

Severity ID Title Vendor Product Date Type
NONE TRENDMICROBLOG:...

The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns_TRENDMICROBLOG:C7F0392777C334D85C668B8AF894205D

Trend™ Research examines the complex collaborative relationship between China-aligned APT groups via the new “Premier Pass-as-a-Service” model, exe...

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities_TRENDMICROBLOG:C8F70121C31A8A90DE050E9F725F3C50

Trend Research examines the latest version of the Vidar stealer, which features a full rewrite in C, a multithreaded architecture, and several enha...

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing_TRENDMICROBLOG:32F270AD2F53B8904C20D499B32D9EE0

A targeted underground doxxing campaign exposed alleged core members of Lumma Stealer (Water Kurita), resulting in a sharp decline in its activity ...

N/A N/A TRENDMICROBLOG
HIGH 7.7 TRENDMICROBLOG:...

Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits_TRENDMICROBLOG:4B63C060E40611951D6BB5EF09E33202

Trend™ Research has uncovered an attack campaign exploiting the Cisco SNMP vulnerability CVE-2025-20352, allowing remote code execution and rootkit...

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

A Cascade of Insecure Architectures: Axis Plugin Design Flaw Expose Select Autodesk Revit Users to Supply Chain Risk_TRENDMICROBLOG:73D912321E29B17D0F3654EC2B76800E

We discovered Azure Storage Account credentials exposed in Axis Communications’ Autodesk Revit plugin, allowing unauthorized modification of cloud-...

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits_TRENDMICROBLOG:AD38A84AAFAA5881ECDDF33BFB80CAC8

Trend™ Research and ZDI Threat Hunters have identified a large-scale RondoDox botnet campaign exploiting over 50 vulnerabilities across more than 3...

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

Weaponized AI Assistants & Credential Thieves_TRENDMICROBLOG:4892F762BCA2C850EC2720DEBB71AB36

Learn the state of AI and the NPM ecosystem with the recent s1ngularity' weaponized AI for credential theft.

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

How Your AI Chatbot Can Become a Backdoor_TRENDMICROBLOG:C4290B02FF8563013134B531366592D7

In this post of THE AI BREACH, learn how your Chatbot can become a backdoor.

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users_TRENDMICROBLOG:7E0094A83E405C8D71456B5B70711C76

Trend™ Research has identified an active campaign spreading via WhatsApp through a ZIP file attachment. When executed, the malware establishes pers...

N/A N/A TRENDMICROBLOG
NONE TRENDMICROBLOG:...

Cloud Security in the CNAPP Era: Eight Important Takeaways_TRENDMICROBLOG:E9F75C69867B33544622150A975AA346

Eight takeaways on why Trend Vision One™ embodies the best of today’s CNAPP vision. Includes insights from 2025 Gartner® Market Guide for CNAPP

N/A N/A TRENDMICROBLOG