AUGUST 9, 2013
Your regular source of security updates from TrendLabsSM
In This Issue

Security Spotlight
Mobile Threats: In It to Win the Threat Race

Security for Home Users
Master Key Vulnerability Unlocks Your Phone to Malware

Security for Business
Coping with Evolution: Virtual Patching for Mutating Bugs and Businesses



Security for Business

Coping with Evolution: Virtual Patching for Mutating Bugs and Businesses

For Trend Micro CTO Raimund Genes, the bigger debate is not about how long it must take to publish and fix glitches but how vulnerabilities are reported to vendors and affected businesses.”



As high-profile server-side exploits emerge and new platforms open new windows of exposure in businesses, the need for an effective patching solution and tenable vulnerability disclosure policies becomes even more important.

Exploits Highlight the Importance of Server Security

Vulnerabilities continue to be a business nuisance as multiple zero-day exploits compromise Plesk, ColdFusion®, and Ruby on Rails by targeting server-side flaws. These incidents stress how critical protecting a company’s web servers is through timely software updates and patches.

Vulnerability Disclosure Issues Surface

The slew of zero-day exploit attacks targeting disclosed bugs and Google’s seven-day disclosure policy implementation raised issues on how to best announce vulnerabilities. Trend Micro CTO Raimund Genes pointed out that the policy is impractical, as it expects a software patch to be available in seven days. For him, the bigger debate is not about how long it must take to publish and fix glitches but how vulnerabilities are reported to vendors and affected businesses.

The Promise of Virtual Patching

Virtual patching temporarily mends a discovered bug to prevent it from being exploited while waiting for a vendor patch’s release. It also protects businesses that have adopted virtualized and cloud platforms. This is the vulnerability shielding solution that businesses need to cope with rapidly evolving bugs and constantly changing business structures.

Copyright ©2013 Trend Micro Incorporated. All rights reserved. Trend Micro and the Trend Micro t-ball logo are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their respective owners. The information contained in this document is subject to change without prior notice.

www.trendmicro.com

  CONNECT WITH US ON: