'You need to come up with a plan for fixing this right now. Ormandy posted his findings to the Google Security Research blog, urging that Trend Micro 'should be paging people to get this fixed.' 'I don't even know what to say - how could you enable this thing by default on all your customer machines without getting an audit from a competent security consultant?' Ormandy wrote in one of a series of emails - repeated on the blog - to Trend Micro after finding the vulnerability. Tavis Ormandy, of Google Project Zero - an assembled team of security researchers whose mission is to track down and resolve security holes in the world's software - discovered the design flaw. Users should update the software as soon as possible.

Trend Micro has now issued a security patch for the flaw, which was contained in the password manager of the antivirus package.

A popular antivirus software for Windows computers made them vulnerable to being hacked.Ī security hole in Trend Micro meant that any PCs running its antivirus software could be hijacked, infected with malware, wiped clean and have its stored passwords stolen - even if they were encrypted.

Trend micro antivirus security 2016