Trend Vision One Endpoint Security agent December 2025 update - Windows

Includes performance enhancements for Vulnerability Assessment and Attack Surface Discovery

Standard Endpoint Protection - Updates the Behavior Monitoring Core Service to version 2.98.2144 to enhance system performance

Standard Endpoint Protection - Updates the Scheduled Updates configuration in the web console for agents

Server & Workload Protection - Firewall and Intrusion Prevention system events now display process and user info if the data is available. This enhancement is being rolled out gradually and might not follow the normal release schedule.

Server & Workload Protection - Strong cipher and minimum Transport Layer Security (TLS) version can be set in the agent configuration file for agents using Deep Security Relay

Server & Workload Protection - Updates the Advanced Threat Scan Engine to version 25.560

Fixes an authorization issue that enabled the agent to accept all policy requests

To prevent RPC hang, agent now terminates WebInstaller if abnormal behavior is detected during agent update or installation

Data Security Sensor - Fixes included to prevent heap corruption

Standard Endpoint Protection - Resolved issue: after a malware file is quarantined on agent endpoints, the system might not clean the encrypted malware file properly

Standard Endpoint Protection - Resolved issue: backup folders and files for agent updates are not periodically removed properly and might occupy excessive disk space on endpoints

Standard Endpoint Protection - Fixed an issue related to Behavior Monitoring and Microsoft Defender might cause agent endpoints to become unresponsive

Standard Endpoint Protection - Resolved issue: user-defined suspicious objects (IP address) might not be detected and blocked properly by agents

Standard Endpoint Protection - Resolved issue: the Trend Micro Apex One Data Protection service (DSAGENT.exe) might stop unexpectedly

Server & Workload Protection - Resolved issue: uploading logs using the File Collection or Custom Script functions failed on some systems

Server & Workload Protection - Resolved issue: Software builds took much longer on certain systems running the agent with Device Control enabled

Server & Workload Protection - Fixed an issue where the agent did not populate the Last updated column in the Software information tab in Endpoint Inventory endpoint details

Server & Workload Protection - Resolved issue: Anti-Malware proteciton sometiems stops working when the operating system was running in low power mode (for example, with the laptop screen off or closed)

Server & Workload Protection - Resolved issue: while Application Control was running in lockdown mode, applications could execute if Application Control was processing a ruleset change