Trend Micro ZDI Hosts Hacking Contest for Vulnerabilities in AI-Enabled Devices

Rhea-AI Summary

Trend Micro Incorporated (TYO: 4704; TSE: 4704) is hosting Pwn2Own Ireland, a hacking contest focused on uncovering vulnerabilities in AI-enabled devices. The event, sponsored by Meta, Synology, and QNAP, aims to improve cybersecurity for both consumer and enterprise networks. Participants will compete in seven categories, including mobile phones, messenger apps, and smart home devices.

The contest highlights the increasing importance of securing consumer devices that can serve as entry points for cybercriminals targeting enterprise networks. Cash prizes are awarded for disclosing vulnerabilities, allowing vendors to patch them and Trend to protect its customers an average of 70 days ahead of the industry. This initiative is part of Trend's commitment to addressing the challenges posed by the rapid adoption of AI tools and the expanding attack surface in today's digital landscape.

Positive

• Trend Micro is proactively addressing cybersecurity risks associated with AI-enabled devices
• The company's bug bounty program helps protect customers 70 days ahead of the industry average
• Pwn2Own contest attracts global talent to uncover vulnerabilities before cybercriminals can exploit them
• Trend Vision One platform offers industry-first security for AI services and users

Negative

• Increasing complexity of attack surfaces due to remote work and BYOD policies poses challenges for security leaders
• Proliferation of generative AI tools creates new attack paths for threat actors

Pwn2Own Ireland underscores Trend's commitment to securing AI innovations

DALLAS, Oct. 22, 2024 /PRNewswire/ -- Global cybersecurity leader Trend Micro Incorporated (TYO: 4704; TSE: 4704) has invited hackers from around the globe to the first ever Pwn2Own Ireland competition sponsored by Meta, Synology, and QNAP. As cybercriminals increasingly focus on using consumer devices to gain access to enterprise networks, participants in the contest will uncover exploits and unpatched vulnerabilities in widely used AI-enabled hardware and software. Cash prizes are awarded for disclosing vulnerabilities, enabling vendors to patch them and Trend to protect its customers an average of 70 days ahead of the industry.

Discoveries made at Pwn2Own allow enterprises to reduce cyber risks that they otherwise could not effectively oversee.

Kevin Simzer, COO at Trend: "Enterprise security is not limited to enterprise devices. Remote work, bring-your-own-device policies, and sprawling corporate networks mean that consumer devices are critical entry points for both employees and cybercriminals. This makes it more difficult than ever for security leaders to understand and secure their organization's highly complex attack surfaces. Our market-leading bug bounty program offers cash prizes to researchers who can find vulnerabilities before the bad guys do, improving security for both our enterprise customers and the entire industry. Pwn2Own is our key to protecting customers weeks or even months in advance, and we remain committed to hosting these events year-round."

The proliferation of generative AI tools has created new attack paths for threat actors who can abuse these tools to damage infrastructure, infiltrate cloud networks, steal sensitive data and rapidly generate convincing deepfakes to perpetrate fraud. Consumer devices that use local AI tools may also pose risks to enterprise security even when not connected to internal networks due to information being saved locally or elsewhere by AI tools.

The contest, hosted by the Trend Micro Zero Day Initiative™, will reward researchers for disclosing vulnerabilities in seven categories: Mobile Phones, Messenger Apps, The SOHO (Small Office/Home Office) Smashup, Surveillance Systems, Home Automation Hubs, Printers, Smart Speakers, and Network Attached Storage (NAS) Devices. AI will play roles for both attack and defense as Trend implements researchers' discoveries into its threat intelligence database in real time.

Dustin Childs, Head of Threat Awareness at Trend's Zero Day Initiative: "Rapid adoption of AI tools combined with widespread use of consumer devices on enterprise networks is presenting organizations around the world with the challenge of reducing risks that they can't easily oversee. Vulnerabilities in these devices and programs are inevitable, but we're here to find them before threat actors do. In doing so, we reduce risk for all parties—employees, enterprises, partners, and the public—without having to place a greater burden on security staff or budgets."

To address the speed and diversity of threats and risks facing global enterprises, Trend has invested heavily in its flagship Trend Vision One™ platform, delivering industry-first security for AI services as well as the people using them. Other platform innovations in 2024 include deepfake detection, native protection for AI PCs, security for AI datacenters and the development of AI integrations, protection of AI deployments for enterprises and governments and more to come.

Trend upholds a robust responsible AI model and believes that all security vendors have a responsibility to ensure technologies are developed and used in ways that are ethical, transparent and accountable.

Pwn2Own Ireland is being held in Cork from October 22-25, 2024.

To learn more about Pwn2Own and Trend Micro's Zero Day Initiative, visit: https://www.zerodayinitiative.com/blog/2024/10/22/pwn2own-ireland-the-full-schedule

About Trend Micro 
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fuelled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's AI-powered cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, Trend's platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 70 countries, Trend Micro enables organizations to simplify and secure their connected world. www.TrendMicro.com.

 

View original content to download multimedia:https://www.prnewswire.com/news-releases/trend-micro-zdi-hosts-hacking-contest-for-vulnerabilities-in-ai-enabled-devices-302282756.html

SOURCE Trend Micro Incorporated

FAQ

When and where is Pwn2Own Ireland 2024 taking place?

Pwn2Own Ireland 2024 is being held in Cork from October 22-25, 2024.

What are the categories for the Pwn2Own Ireland 2024 contest?

The contest has seven categories: Mobile Phones, Messenger Apps, The SOHO Smashup, Surveillance Systems, Home Automation Hubs, Printers, Smart Speakers, and Network Attached Storage (NAS) Devices.

How does Trend Micro (TMICY) benefit from hosting Pwn2Own contests?

Trend Micro benefits by discovering vulnerabilities before cybercriminals, allowing them to protect customers an average of 70 days ahead of the industry and improve security for both enterprise customers and the entire industry.

What is Trend Micro's approach to AI security as mentioned in the press release?

Trend Micro has invested in its Trend Vision One platform, offering industry-first security for AI services and users. They also uphold a robust responsible AI model and believe in ethical, transparent, and accountable AI development and use.