Curated security research, vulnerabilities, advisories and tools for practitioners.

Who Scans the Scanner? Exploiting Trend Micro Mobile Security

Summary

Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We uncovered three Trend Micro Mobile Security vulnerabilities: (1) unauthenticated access to device security reports, exposing app inventories, scan histories, and policy status; (2) a persistent stored XSS injected via Android agent […]
Published
Collected