https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Trend Micro.Sun, 26 Jul 2026 22:32:51 GMThttps://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.htmlcst-2816A heap-based buffer overflow in 7-Zip's XZ archive processing (CVE-2026-14266) allows remote code execution when opening malicious files. The vulnerability was disclosed by Trend Micro's Zero Day Initiative on July 15, with a patch available since June 25 in version 26.02.Mon, 20 Jul 2026 09:10:56 GMThttps://securityweek.com/trend-micro-tanium-eset-and-tenable-patch-severe-product-vulnerabilitiescst-2644Cybersecurity vendors Trend Micro, Tanium, ESET, and Tenable released patches for critical and high-severity vulnerabilities in their products. The article provides no details on affected products, vulnerability types, or patch availability.Thu, 16 Jul 2026 06:08:08 GMThttps://cyberscoop.com/microsoft-patch-tuesday-july-2026cst-2535Microsoft disclosed 622 vulnerabilities during July 2026 Patch Tuesday, more than triple the previous month's record of 206 and reflecting an exponential surge driven by artificial intelligence tools discovering defects at scale. Two actively exploited zero-day vulnerabilities in Active Directory Federation Services and SharePoint Server were included among the batch, with 63 rated as critical. The pace suggests Microsoft will exceed 2,000 or more Common Vulnerabilities and Exposures (CVEs) for the calendar year, far surpassing historical annual records.Tue, 14 Jul 2026 20:05:46 GMThttps://darkreading.com/cyberattacks-data-breaches/phishers-persistence-eu-asia-hospitality-orgscst-90Microsoft and Trend Micro have identified separate but coordinated phishing campaigns targeting hospitality organizations in the EU and Asia. The attacks use malicious zip files with social engineering and obfuscation techniques, including abuse of blockchain services, to establish persistent malware infections.Tue, 30 Jun 2026 18:59:46 GMThttps://krebsonsecurity.com/2026/06/popa-botnet-linked-to-publicly-traded-israeli-firmcst-131The Popa Android botnet has compromised millions of consumer TV boxes over four years, forcing them to serve as residential proxies for advertising fraud, account takeovers, and data scraping. Researchers from multiple security firms have linked Popa to NetNut, a residential proxy provider operated by publicly-traded Israeli firm Alarum Technologies, with evidence connecting a Popa control domain (ninjatech.io) to NetNut's vice president of research and development.Thu, 18 Jun 2026 17:37:58 GMThttps://recordedfuture.com/blog/may-2026-cve-landscapecst-1953In May 2026, Insikt Group identified 41 high-impact vulnerabilities requiring prioritized remediation, representing an 11% increase from April. These vulnerabilities affected 20 vendors, with 21 included in CISA's Known Exploited Vulnerabilities catalog, 19 detected via honeypot data, and one reported by a vendor. Notably, 12 vulnerabilities enabled remote code execution, public proof-of-concept exploits were available for 32 of them, and five were first disclosed between 2008 and 2010, demonstrating continued exploitation of long-standing weaknesses.Mon, 08 Jun 2026 00:00:00 GMT