TrendAI™ Zero Day Initiative Leads Industry Remediation at Pwn2Own Berlin

kAmkDA2? 4=2DDlQ=686?5$A2?r=2DDQmsp{{p$k^DA2?m[ kDA2? 4=2DDlQ=686?5$A2?r=2DDQm|2J `g[ a_aek^DA2?m ^!#}6HDH:C6^ \\ %C6?5px™[ E96 6?E6CAC:D6 4J36CD64FC:EJ 3FD:?6DD 7C@> k2 9C67lQ9EEADi^^6586]AC?6HDH:C6]4@>^4^=:?<^nEl_U2>Aj=l6?U2>Aj@lceh`b`_\`U2>Aj9lafgbbgcfgbU2>AjFl9EEATbpTauTauHHH]EC6?5>:4C@]4@>TauU2>Aj2l%C6?5Z|:4C@Zx?4@CA@C2E65Q E2C86ElQ03=2?<Q C6=lQ?@7@==@HQm%C6?5 |:4C@ x?4@CA@C2E65k^2m Wk2 9C67lQ9EEADi^^6586]AC?6HDH:C6]4@>^4^=:?<^nEl_U2>Aj=l6?U2>Aj@lceh`b`_\`U2>Aj9lbhbaecf_bgU2>AjFl9EEATbpTauTauHHH]8@@8=6]4@>Tau7:?2?46TbuBTbs%*~Tbpcf_cU2>Aj2l%*~TbpZcf_cQ E2C86ElQ03=2?<Q C6=lQ?@7@==@HQm%*~i cf_ck^2mjk2 9C67lQ9EEADi^^6586]AC?6HDH:C6]4@>^4^=:?<^nEl_U2>Aj=l6?U2>Aj@lceh`b`_\`U2>Aj9lh`gaeg_gaU2>AjFl9EEATbpTauTauHHH]EC6?5>:4C@]4@>TauFDTau23@FE\FDTau:?G6DE@C\C6=2E:@?DTau:?56I]9E>=U2>Aj2lTraTp_%$tTbpZcf_cQ E2C86ElQ03=2?<Q C6=lQ?@7@==@HQm %$ti cf_ck^2mX[ E@52J 46=63C2E65 E96 677@CED @7 E96 8=@32= D64FC:EJ C6D62C49 4@>>F?:EJ 2E !H?a~H? q6C=:?] r@?E6DE2?ED 5:D4@G6C65 2?5 5:D4=@D65 cf F?:BF6 K6C@\52J GF=?6C23:=:E:6D 24C@DD 42E68@C:6D :?4=F5:?8 px 52E232D6D[ 4@5:?8 286?ED[ H63 3C@HD6CD[ 6?E6CAC:D6 2AA=:42E:@?D[ D6CG6CD[ 2?5 >@C6]k^Am

k5:G 4=2DDlQ!#}0x>365565pDD6E#676C6?46Q :5lQs:GpDD6E!=246w@=56C`QmkA E:E=6lQ!H?a~H? q6C=:? a_ae :D :? E96 3@@<D[ 2?5 :E H2D 2? 2>2K:?8 4@?E6DE 7C@> DE2CE E@ 7:?:D9] (6 2H2C565 S`[`ah[ad_ 7@C cf F?:BF6 _\52JD] y@:? sFDE:? r9:=5D 2?5 ':?46?E {66 2D E96J C642A E96 9:89=:89ED 2?5 @776C 2 AC6G:6H @7 H92EUR_bhjD E@ 4@>6]Qmk^Amk^5:Gm

kAmkDEC@?8m#2496= y:?[ w625 @7 %C6?5pxik^DEC@?8m Q%C6?5px™ FD6D E96 566A6DE E9C62E :?E6==:86?46 :? E96 :?5FDECJ E@ AC@E64E @FC 4FDE@>6CD] (6 FD6 E96 GF=?6C23:=:E:6D 5:D4@G6C65 2E !H?a~H? E@ 6>A@H6C G6?5@CD E@ A2E49 E96D6 GF=?6C23:=:E:6D BF:4<=J[ H9:=6 2=D@ @776C:?8 @FC 4FDE@>6CD AC@E64E:@? H6== 29625 @7 E96 C6DE @7 E96 :?5FDECJ G:2 G:CEF2= A2E49:?8] pD px E@@=D 2?5 :?7C2DECF4EFC6 4@?E:?F6 E@ 364@>6 46?EC2= E@ 3FD:?6DD6D 7F?4E:@?D[ DE2J:?8 29625 @7 GF=?6C23:=:E:6D H:== 36 2D 4C:E:42= 2D 6G6C]Qk^Am

kAm}'xsxp ;@:?65 E96 6G6?E 2D 2 7:CDE\E:>6 DA@?D@C @7 !H?a~H?[ 3C:?8:?8 :ED @H? 42E68@CJ @7 AC@5F4ED 7@C C6D62C496CD E@ E2C86E 7@C GF=?6C23:=:EJ 5:D4=@DFC6D] |682EC@? qC:586[ }' r@?E2:?6C %@@=<:E[ 2?5 sJ?2>@ H6C6 :?4=F565]k^Am

kAm%96 5:D4=@DFC6D >256 E9C@F89 E96 +sx 2E !H?a~H? 2?5 J62C\C@F?5 2==@H G6?5@CD E@ BF:4<=J F?56CDE2?5 2?5 7:I GF=?6C23:=:E:6D 367@C6 4J36C4C:>:?2=D 6IA=@:E E96>[ F=E:>2E6=J 36?67:E:?8 @C82?:K2E:@?D 2?5 6?5 FD6CD @7 E96 :>A24E65 D@7EH2C6 @C 92C5H2C6] +sx C6D62C49 92D D9@H? E92E G6?5@CD 2C6 :?4C62D:?8=J ?68=64E:?8 E@ A2E49 D@7EH2C6 GF=?6C23:=:E:6D E92E 2C6 5:D4=@D65 E@ E96>] %9C@F89 +sxVD 4@@C5:?2E65 5:D4=@DFC6 AC@46DD[ %C6?5px ':D:@? ~?6™ 4FDE@>6CD C646:G6 2C6 AC@E64E65 2? 2G6C286 @7 E9C66 >@?E9D 29625 @7 E96 C6DE @7 E96 :?5FDECJ]k^Am

kAmw:89=:89ED 7C@> E96 6G6?E :?4=F565ik^Am

kF= EJA6lQ5:D4Qmk=:m~C2?86 %D2: Wo@C2?860gbe`X @7 st'r~#t #6D62C49 %62> 492:?65 b 3F8D E@ 249:6G6 #6>@E6 r@56 tI64FE:@? 2D $*$%t| @? |:4C@D@7E tI492?86[ 62C?:?8 Sa__[___] %96J 2=D@ 492:?65 c =@8:4 3F8D E@ 249:6G6 2 D2?53@I 6D42A6 @? |:4C@D@7E t586[ 62C?:?8 S`fd[___]k^=:mk=:m$A=:E=:?6 WoDA=:E=:?6X @7 st'r~#t #6D62C49 %62> 492:?65 a 3F8D E@ 6IA=@:E |:4C@D@7E $92C6!@:?E[ 62C?:?8 S`__[___]k^=:mk=:m}8FJ6? w@2?8 %9249 Wo9:0:>05cC<?bDDX @7 $%p#{23D $v WoDE2C=23D0D8X FD65 2 |6>@CJ r@CCFAE:@? 3F8 E@ 6IA=@:E '|H2C6 t$): H:E9 E96 rC@DD\E6?2?E r@56 tI64FE:@? 255\@?[ 62C?:?8 Sa__[___ 2?5 a_ |2DE6C @7 !H? A@:?ED]k^=:mk=:mr9@>A:6 @7 xq| )\u@C46 ~776?D:G6 #6D62C49 W)~#X FD65 2 D:?8=6 3F8 E@ 6IA=@:E }' r@?E2:?6C %@@=<:E[ 62C?:?8 Sd_[___]k^=:mk^F=m

kAmp E@E2= @7 S`[ahg[ad_ :? AC:K6D H6C6 2H2C565 E@ E96 A2CE:4:A2?ED] %96 ?6IE 4@>A6E:E:@?[ !H?a~H? r@C<[ H:== 36 96=5 :? ~4E@36C]k^Am

kAmkDEC@?8mp3@FE %C6?5px™k^Am

kAm%C6?5pxUEC256j[ E96 8=@32= px D64FC:EJ =6256C 2?5 6?E6CAC:D6 3FD:?6DD F?:E @7 %C6?5 |:4C@[ 6>A@H6CD @C82?:K2E:@?D H:E9 7F== px G:D:3:=:EJ 2?5 4@?D@=:52E65 D64FC:EJ E92E :?DA:C6D 4@?7:56?46[ 5C:G6D :??@G2E:@?[ 2?5 6=:>:?2E6D C:D<] %CFDE65 3J E96 =2C86DE 6?E6CAC:D6D 2?5 8@G6C?>6?ED 24C@DD `gd 4@F?EC:6D[ %C6?5pxUEC256j D64FC6D E96 6?E:C6 @C82?:K2E:@?[ 7C@> :56?E:E:6D E@ :?7C2DECF4EFC6 E@ 52E2] v=@32= u@CEF?6 d__ 4@>A2?:6D C6=J @? %C6?5pxUEC256j E@ 4FE C:D< 2?5 DE@A E9C62ED FA E@ E9C66 >@?E9D 62C=:6C[ A@H6C65 3J H@C=5\=625:?8 E9C62E 2?5 2EE24< :?E6==:86?46] %9C@F89 566A 64@DJDE6> A2CE?6CD9:AD H:E9 >2C<6E =6256CD =:<6 }'xsxp[ p?E9C@A:4[ p($[ v@@8=6[ 2?5 |:4C@D@7E[ %C6?5pxUEC256j 6>A@H6CD J@FC @C82?:K2E:@? E@ D64FC6=J 5C:G6 7@CH2C5 2E E96 DA665 @7 px] px u62C=6DD=J] {62C? >@C6 2E k2 9C67lQ9EEAi^^EC6?52:D64FC:EJ]4@>QmEC6?52:D64FC:EJ]4@>k^2m]k^Am

kAm k^Am

k5:G 4=2DDlQ!#}0x>365565pDD6E#676C6?46Q :5lQs:GpDD6E!=246w@=56CaQmkAmk2 9C67lQ9EEADi^^>>2]AC?6HDH:C6]4@>^>65:2^ah`hfbh^%C6?5px0{@8@]9E>=Q E2C86ElQ03=2?<Q C6=lQ?@7@==@HQmk^2mk^Amk^5:Gm

kA :5lQ!&#{Qmk:>8 E:E=6lQr:D:@?Q H:5E9lQ`aQ 96:89ElQ`aQ 2=ElQr:D:@?Q DC4lQ9EEADi^^6586]AC?6HDH:C6]4@>^4^:>8^72G:4@?]A?8nD?l$ueabceU2>AjD5la_ae\_d\`gQ ^m ':6H @C:8:?2= 4@?E6?E E@ 5@H?=@25 >F=E:>65:2ik2 :5lQ!#}&#{Q C6=lQ?@7@==@HQ 9C67lQ9EEADi^^HHH]AC?6HDH:C6]4@>^?6HD\C6=62D6D^EC6?52:\K6C@\52J\:?:E:2E:G6\=625D\:?5FDECJ\C6>65:2E:@?\2E\AH?a@H?\36C=:?\b_affdaee]9E>=Q E2C86ElQ03=2?<Qm9EEADi^^HHH]AC?6HDH:C6]4@>^?6HD\C6=62D6D^EC6?52:\K6C@\52J\:?:E:2E:G6\=625D\:?5FDECJ\C6>65:2E:@?\2E\AH?a@H?\36C=:?\b_affdaee]9E>=k^2mk^Am

kAm$~&#rt %C6?5pxk^Am

kAmk:>8 2=ElQQ DC4lQ9EEADi^^CE]AC?6HDH:C6]4@>^CE]8:7n}6HDxE6>x5l$ueabceU2>Aj%C2?D>:DD:@?0x5la_ae_d`g`fa`!#0}t($0&$!#00000$ueabceU2>Ajs2E6x5la_ae_d`gQ DEJ=6lQ3@C56Ci_AIj H:5E9i`AIj 96:89Ei`AIjQ ^mk^Am