Osterman Research

We attended RSAC 2024 in San Francisco from May 6-8. Our days at the conference were packed with back-to-back briefings. 

Here’s some notes on our briefing with Kris Anderson (Director, Product Management) and Matthew Blair (Analyst Relations Manager) of Trend Micro. Matthew organized the briefing. 

Key takeaways:

• Trend Micro is a large vendor with a diverse and extensive range of cybersecurity products and services. It was never the intent to have an exhaustive discussion.
• Kris’s team is responsible for the product management of multiple Trend tools including endpoint security; extended detection and response; attack surface and risk management; and zero trust.
• Blended multi- and cross-channel phishing attacks are a growing problem for organizations, particularly when security tools are implemented in siloes and don’t correlate threat signals. For example, the validity of a communication is greatly increased when an email message is immediately followed by a Zoom call to confirm receipt and request immediate action. When this is a malicious chain of communication events, however, this socially engineered validity can result in great damage to an organization’s reputation and finances. Detection of these blended attacks and the use of deepfake video calls are current areas of investment for Trend Micro.
• Trend’s attack surface risk management offering currently works across endpoints, internet-facing assets, identity, applications and cloud assets, and assigns risk levels based on the likelihood of compromise and the potential business impact. Trend Vision One – Attack Surface Risk Management combines multiple product categories in a single offering, such as external attack surface management, vulnerability prioritization, and cloud security posture management. For more, see Trend Micro 
• With respect to AI and cybersecurity, Trend is interested in both angles: the use of AI for cybersecurity and cybersecurity for the use of AI. For the latter, think malformed requests, model drift, and prompt injection type of attacks. This, also, is an area of ongoing investment – as it was for most of the vendors at RSAC 2024.

For more, see Trend Micro.