Trend Micro Leads Industry in Early Protection Against Two High-Impact Zero-Day Vulnerabilities

In a year already marked by a surge in zero-day exploits, Trend Micro once again demonstrates why it’s a global leader in proactive cybersecurity. Two recent critical vulnerabilities — one in Microsoft SharePoint and the other in Cisco Identity Services Engine (ISE) — have surfaced as major threats to enterprise environments. Thanks to the Trend Micro Zero Day Initiative (ZDI), customers were already protected months before these exploits began circulating in the wild.

Case 1: SharePoint “ToolShell” Zero-Day (CVE-2025-53770)

Discovered during Pwn2Own Berlin 2025 by researchers from CODE WHITE GmbH, this unauthenticated remote code execution (RCE) vulnerability in Microsoft SharePoint has been weaponized in active attacks as confirmed by Microsoft on July 20, 2025.

Trend Micro’s Early Defense:

Ad Powered By Advergic
  Loading ad . . . 
 Ad - Continue scrolling to read

Protected Since: May 2025 — months before public exploitation
Virtual Patching via TippingPoint Filters:
- Filter 46160 – SharePoint Insecure Deserialization (ZDI-25581)
- Filter 45906 – ZDI-CAN-27247
- Filter 45905 – ZDI-CAN-27162

Trend Micro’s Zero Day Initiative responsibly disclosed the vulnerability to Microsoft and deployed protection for its customers via TippingPoint, mitigating risks without requiring any downtime or emergency patches.

Case 2: Cisco ISE Root RCE Vulnerability (CVE-2025-20281)

Rated a maximum 10.0 CVSS, this critical vulnerability in Cisco Identity Services Engine (ISE and ISE-PIC) allows unauthenticated attackers to gain root access, posing an existential threat to any enterprise’s network access control layer.

Trend Micro’s Response:

Protected Since: Early July 2025
TippingPoint Filter: ID 46117 — deployed in default blocking mode
Discovered by: Trend Micro’s own Zero Day Initiative

This real-world exploit showcases the strength of Trend Micro’s virtual patching capability — delivering security before vendor patches are even available.

Why Virtual Patching Matters

In today’s threat landscape, waiting for vendor patches is no longer an option. Trend Micro’s virtual patching gives organizations the upper hand by:

Blocking zero-day attacks in real-time
Minimizing downtime and operational burden
Protecting legacy and unpatchable systems

Whether you’re managing a hybrid environment or scaling across cloud, endpoint, and network, Trend Micro ensures your business stays secure — without compromise.