Cloud Security

December 4, 2024—We've added four new widgets in the Security Dashboard for Cloud Posture app under Cloud Overview, for a quick view of your overall cloud posture. The new widgets are: Protection, Potential Attack Path, Security Posture, and Compliance.

November 29, 2024—You can now access the new Cloud Posture public APIs for Configurations & Reports through the Trend Vision One Automation Center.

December 2, 2024—Automated tagging is now available for resources deployed to your AWS account by the Cloud Accounts app. Resources deployed by the Cloud Accounts app have the "TrendMicroProduct" tag added. You can use these tags to track resources and costs from the Cloud Accounts features. To add the tags to an existing connection, update your AWS account resource stack.

For more information, see Resources deployed by Cloud Accounts.

December 2, 2024—XDR for Cloud - VPC Flow Log Monitoring extends AWS VPC Flow Log monitoring support to the me-south-1 region. Deploy VPC Flow Log Monitoring in this region to leverage advanced capabilities to analyze network traffic and enhance threat detection.

November 25, 2024—XDR for Cloud now integrates with Amazon Security Lake, allowing customers to send their Security Lake data to Trend Vision One. Connect Trend Vision One to your Amazon Security Lake to forward your CloudTrail Logs, VPC Flow Logs, WAF Logs, EKS Audit Logs, Route53 Resolver Query Logs, and SecurityHub Findings. Get actionable insight into your environment with XDR detection models that alert you about malicious and suspicious activity happening in your cloud resources, services, and network.

November 13, 2024 — Trend Vision One Container Security now enables you to move Kubernetes clusters between groups in Container Inventory. This facilitates more efficient management of your clusters.

For more information, see Container Inventory.

November 13, 2024 — Trend Vision One Container Security now offers Runtime Malware Scanning to help you detect malicious software in your production containers. This new feature provides scheduled malware scans of running containers and threat detection to identify malware in your production environment. With this release, Container Security ensures comprehensive security coverage throughout your container lifecycle by actively monitoring for both vulnerabilities and malware threats in production workloads.

For more information, see Enabling runtime security and scanning features.

October 31, 2024 — Trend Vision One – Container Security now supports compliance scanning with CIS benchmarks in your Red Hat OpenShift clusters. Assess and guarantee adherence to industry-leading security standards effortlessly, enhancing your OpenShift security posture.

For more information, see Compliance.

October 9, 2024—You can now interact directly with the Kubernetes API to create and manage Container Security cluster-managed policies and rulesets within your Kubernetes clusters. This integration facilitates seamless deployment of Container Security policies and rulesets with your GitOps workflows.

For more information, see Cluster-managed policies.

October 9, 2024—Container Security now supports access to detailed results and statistics for scanned artifacts on the Container Image Scanning page from the Trend Vision One console. View the scan results of registry image artifacts for vulnerabilities, malware, and secrets within your continuous integration (CI) or continuous delivery (CD) pipeline.

For information, see Container Image Scanning.

September 30, 2024 — The “Checks and Profiles” public APIs for Cloud Posture is now available on the Trend Vision One Automation Center. For more information, visit the Automation Center.

September 24, 2024 — Trend Vision One – Container Security now supports compliance scanning with CIS benchmarks in your Kubernetes clusters. Assess and guarantee adherence to industry-leading security standards effortlessly, enhancing your Kubernetes security posture.

For more information, see Compliance.

August 7, 2024 — Container Inventory allows users to organize their Kubernetes clusters into groups for enhanced control and streamlined management. Asset Visibility Scope supports this feature by allowing specific permissions to be assigned by groups, facilitating more efficient management of clusters.

For more information, see Container Inventory.

July 16, 2024 — The recommendations for creating policies and rulesets for Container Security have been updated, including instructions for testing rules that are set to terminate or isolate, and an updated list of rulesets. For more information, see the Business Success portal.

July 4, 2024 – Container Security now supports asset configuration and management with Terraform. For details, see the Vision One provider in the Terraform registry.

July 4, 2024 — The Container Inventory app now features filter and search functions to streamline the process to locate container services within the table view. Additionally, Container Inventory has implemented a page view, making it easier to navigate the list. These features encompass K8S elements such as Clusters, Nodes, Pods, and Containers, as well as ECS components including Clusters, Services, Tasks, and Containers.

For more information, see Container Inventory.

July 1, 2024 – To improve the ECS cluster management in your AWS environment, Trend Vision One Container Inventory now allows you to enable or disable runtime security and runtime scanning on multiple Amazon ECS clusters.

For more information, see Container Inventory.

June 27, 2024 — Trend Micro Artifact Scanner (TMAS) now supports artifact scanning for malware and secrets. This helps to identify and manage sensitive and confidential data that might have been inadvertently exposed, like passwords and API keys. You can also integrate TMAS secret scan results with Trend Vision One - Container Security runtime policies to prevent secrets from reaching production environments.

For more information, see Artifact Scanner CLI.

June 25, 2024 – Container Protection’s Events tab now features comprehensive search and filtering enhancements, allowing you to filter by action, operation, kind, and mitigation, and includes fuzzy matching for policies and namespaces. Experience new controls with multi-select options for cluster names and a custom time range feature to optimize your workflow across Deployment/Continuous, Kubernetes Runtime, and ECS Runtime environments.

June 25, 2024 – Container Protection's Vulnerabilities tab now features advanced search capabilities and enhanced data presentation, including the addition of 'Image Name' and 'CVSS Score' in the Detail View. Streamline your security analysis with expanded filters like fuzzy matching, multi-select dropdowns, and time range selections, all sortable by severity and time metrics.

June 25, 2024 — Container Security now supports secret scanning for container images. Secret scanning identifies sensitive and confidential data, such as passwords and API keys, that have inadvertently been publicly exposed. You can define whether to allow images to be deployed based on their scan results and configure the validity period of scan results.

June 12, 2024 — With Trend Vision One – Container Security, compliance scanning with CIS benchmarks in your EKS clusters is seamless. Assess and guarantee adherence to industry-leading security standards effortlessly, enhancing your Kubernetes security posture.

To learn more, see Compliance.

May 6, 2024 — Container Security now supports proxy for Amazon ECS instances, providing a secure way to connect to the Trend Vision One backend.

March 27, 2024— Now Container Security can support Google GCP GKE. Just add Cluster in the Container Security app and install the Helm script into GKE according to our installation steps. You can see GKE's Cluster, Node, and Pod appear in the Tree view on the left. inside. If the user uses the Map to Cloud Account function, relevant information will also appear in the Attack Surface Risk Management app.

March 25, 2024—Container Security now supports Microsoft Azure AKS. Just add the cluster in the Container Security app and install the Helm script into AKS according to our installation steps. You can see AKS's Cluster, Node, and Pod appear in the Tree view on the left. inside. If the user uses the Map to Cloud Account function, relevant information will also appear in the Attack Surface Risk Management app.

March 5, 2024 — The Runtime Security scout component has been updated to allow for the download of larger Runtime Security rule files. Customers should upgrade clusters that are running scout versions older than 2.3.26 (template version 1.0.8 for ECS) to the latest available version to ensure that they have access to new Runtime Security rules as they become available. Older versions of scout continue to receive rules and your existing installations retain their protection, but they cannot be updated as frequently with new rules due to file size limitations.

Instructions on upgrading Runtime Security:

April 8, 2024 - Trend Vision One - File Security is a scanning service that can detect all types of malicious software (malware) including trojans, ransomware, spyware, and more. File Security now offers the following features and enhancements:

Dec 15, 2023 — Customers can now isolate or terminate potentially compromised Kubernetes pods when investigating threat incidents in Workbench, Observed Attack Techniques, and Search.

December 15, 2024 — Public APIs for Trend Vision One Container Security are now available on the Trend Vision One Automation Center. See the Automation Center for more information.

December 11, 2023 — For customers that have updated to the Foundation Services release, Container Security now supports management scope.

Permissions to view and manage Kubernetes clusters and Amazon ECS clusters can be assigned based on management scope for user roles. You can configure the management scope for each custom role in User Roles.

November 30, 2023 — Container Security now protects containers running on ARM CPUs with runtime security and runtime vulnerability scanning.

November 30, 2023 — Container Security now supports proxy for Kubernetes clusters, providing a secure way to connect to the Trend Vision One backend. For more information, see Proxy support for Kubernetes clusters

September 29, 2023 — Container Security helps safeguard your containers throughout their entire life cycle. Container Security is accessible directly in the Trend Vision One console, offering an intuitive and seamless experience for our customers.

August 15, 2023 — Container Security helps safeguard your containers throughout their entire life cycle. Container Security is accessible directly in the Trend Vision One console, offering an intuitive and seamless experience for our customers.