A new version of Trellix Stinger Portable (formerly McAfee Stinger) has been released. Stinger removes thousands of common viruses and 'fake alert' malware on-demand. It is not a replacement for a full antivirus, but handy in many situations. It's packaged in PortableApps.com Format so it can easily integrate with the PortableApps.com Platform. McAfee Stinger is freeware for business and personal use. _Update automatically or install from the portable app store in the PortableApps.com Platform._

To have even a chance of mitigating catastrophic artificial intelligence (AI)- based hacking of a business or government agency, cyber defenders need to identify such attacks within 15 minutes, Trellix Chief Technology Officer Mo Cashman said on Tuesday. Speaking at the Cyber Security conference at Tel Aviv University, Cashman stated that there is an accelerated four-stage timeline for preventing the worst effects of high-speed…

Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities

To have even a chance of mitigating catastrophic artificial intelligence (AI)- based hacking of a business or government agency, cyber defenders need to identify such attacks within 15 minutes, Trellix Chief Technology Officer Mo Cashman said on Tuesday. Speaking at the Cyber Security conference at Tel Aviv University, Cashman stated that there is an accelerated four-stage timeline for preventing the worst effects of high-speed AI cyber attackers. The observe or threat identification stage would need to take place within 15 minutes, the orientation stage within two hours, the decision stage within four hours, and the action stage within four to 72 hours, depending on the nature of the threat. The orientation stage involves better understanding the nature and implications of the threat after the identification stage identifies an abnormality or threat. Next, the decision stage determines what response or actions are needed to fix or mitigate the harm, and the action stage implements the solutions designed to end or subdue the attack's effects. PHP vulnerabilities highlight urgent need for faster cyberattack responses Trellix discussed the need to greatly accelerate response times to hacks and vulnerabilities found by AI reviews of systems, following the disclosure of the PHP programming vulnerabilities. In...

Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities

Trellixの新たな調査によると、2026年4月から9月までの6か月間で、中国の国家支援型脅威活動は41.4%減少しました。 研究者らは、検知された活動の大幅な減少は、より広範な地政学的動向や、中華人民共和国（PRC）の情報収集の優先順位の変化

Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities

A Sharp Decline in Detected Chinese Cyber Operations Chinese nation-state cyber threat activity declined by 41.4% between April and September 2026, according to a new report published by cybersecurity company Trellix on November 4. The significant reduction in detected activity may appear to indicate a slowdown in China's cyber operations. However, researchers caution that fewer detections do not necessarily mean fewer attacks.

TL;DR The Trellix Threat Response Team uncovered a multistage attack that uses fake FedEx tax invoices in Korean to deploy the Sirius Backdoor. Inside an attached ZIP archive, a blank PDF triggers an in-memory PowerShell chain that blinds endpoint sensors and hollows legitimate Windows processes. Furthermore, this fileless Sirius Backdoor drops a custom Windows provisioning package so the malware can survive a full operating system reset.

TL;DR The Trellix Threat Response Team uncovered a multistage attack that uses fake FedEx tax invoices in Korean to deploy the Sirius Backdoor. Inside an attached ZIP archive, a blank PDF triggers an in-memory PowerShell chain that blinds endpoint sensors and hollows legitimate Windows processes. Furthermore, this fileless Sirius Backdoor drops a custom Windows provisioning package so the malware can survive a full operating system reset.

fekern.sys is a known vulnerable driver abused for BYOVD. Get hashes, detection rules and blocklist guidance. CVE: CVE-2025-14963.

A new version of Trellix Stinger Portable (formerly McAfee Stinger) has been released. Stinger removes thousands of common viruses and 'fake alert' malware on-demand. It is not a replacement for a full antivirus, but handy in many situations. It's packaged in PortableApps.com Format so it can easily integrate with the PortableApps.com Platform. McAfee Stinger is freeware for business and personal use. _Update automatically or install from the portable app store in the PortableApps.com Platform._

Trellix addresses an AI-accelerated threat landscape with the first on-premises federated AI core for an agentic SOC, bringing machine-speed defense to the world's most...

AI agent insider risk showed up at 95% of companies in a Trellix survey of 600 CISOs. Detection and response average 15 hours.

Groups Conversations All groups and messages Sign in     Trellix Mind of the CISO: The New Insider 1 view Skip to first unread message Eyal Estrin unread, 8:56 AM (1 hour ago)    to https://www.trellix.com/news/press-releases/trellix-research-reveals-the-true-cost-of-ungoverned-ai/ Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

Trellix has announced Trellix Wise for Private Cloud, an on-premises, federated AI core for agentic security operations. The solution extends a security fabric across an organization’s existing infrastructure to improve threat detection and response while preserving data sovereignty, governance, and predictable costs. “The threat landscape has fundamentally shifted, where AI isn’t just accelerating attacks; it’s commercializing them,” said Vishal Rao, Chief Executive Officer, Trellix. “Our strategy for the AI era is clear: meet AI-powered threats …

Trellix Wise for Private Cloud brings on-premises agentic AI to the SOC, keeping data in the customer’s environment with predictable pricing.

Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked to an insider incident in the past 12 months. The agent logs in, reaches sensitive systems, and acts for a person using that person’s permissions. Most respondents already count it that way: 78% include AI agents and machine identities in …