#Trend micro antivirus security 2016 update
#Trend micro antivirus security 2016 Patch

Trend Micro published a blog about the vulnerability after it had released the mandatory update. A new version of the antivirus software is now available. Trend Micro patched up the vulnerability within a week. Google's Project Zero gives companies 90 days to fix problems before releasing its findings to the public. 'In my opinion, you should temporarily disable this feature for users, then hire an external consultancy to audit the code.' 'The worst thing you can do is leave users exposed while you clean this thing up,' he continued.

'This means anyone on the internet can steal all of your passwords completely silently, as well as execute arbitrary code with zero user interaction,' Ormandy wrote in another email to Trend Micro. Ormandy warned Trend Micro that it needed to hire a cybersecurity professional.

Frankly, it also looks like you're exposing all the stored passwords to the internet, but let's worry about that screw up after you get the remote code execution under control.'ĭigging further into the Trend Micro Password Manager, Ormandy discovered that a malicious script could steal all passwords stored in the browser, even if they were encrypted. 'You need to come up with a plan for fixing this right now. Ormandy posted his findings to the Google Security Research blog, urging that Trend Micro 'should be paging people to get this fixed.' 'I don't even know what to say - how could you enable this thing by default on all your customer machines without getting an audit from a competent security consultant?' Ormandy wrote in one of a series of emails - repeated on the blog - to Trend Micro after finding the vulnerability. Tavis Ormandy, of Google Project Zero - an assembled team of security researchers whose mission is to track down and resolve security holes in the world's software - discovered the design flaw.

#Trend micro antivirus security 2016 update

Users should update the software as soon as possible.

#Trend micro antivirus security 2016 Patch

Trend Micro has now issued a security patch for the flaw, which was contained in the password manager of the antivirus package.

A popular antivirus software for Windows computers made them vulnerable to being hacked.Ī security hole in Trend Micro meant that any PCs running its antivirus software could be hijacked, infected with malware, wiped clean and have its stored passwords stolen - even if they were encrypted.