Trellix

The Amadey malware loader is back with a new evasion trick! Our latest analysis reveals a concerning shift: Amadey operators are now exploiting self-hosted GitLab instances (instead of public GitHub) to deliver the StealC infostealer. Read the full threat analysis for defense recommendations: https://bit.ly/4jm9O4V

We're excited to announce the release of Trellix NDR 4.1, packed with features designed to maximize SOC efficiency and bridge critical security gaps. Hear from our experts about the top new capabilities: 1. NDR Hyperautomation: Our new hyperautomation service uses a no-code, drag-and-drop framework to trigger orchestrated playbooks automatically, reducing MTTD and MTTR by up to 60%. 2. OT Support via Nozomi Integration: Trellix NDR 4.1 now integrates with Nozomi Networks, a leader in OT visibility, to deliver unified visibility across IT and OT environments. 3. Advanced Detections & Architecture: New AI-powered detections include a range of domain controller anomalies, Kerberos roasting, and DNS hijacking, to name a few. 4. Air-gap Ready: Trellix NDR 4.1 is an on-premises–first solution, ensuring that every advanced detection, including AI-based features, works even in air-gapped environments. Learn how Trellix NDR 4.1 empowers your SOC team with faster threat detections, reduced analyst workload, and strengthened cyber resilience.

Let the holiday spirit sparkle! ✨ But while the cheer is high, so are the threats. Our Advanced Research Center has identified the most current and critical malware threats targeting organizations this week. Ensure your defense doesn't take a holiday break. https://bit.ly/46JIoxB

About 96% of respondents to the Mind of the CISO survey said the convergence of IT and OT security is essential to protecting critical infrastructure from attacks. Despite that consensus, more than 2 out of 5 CISOs said their leadership lacks the understanding of how IT and OT security differ from one another. Cybersecurity Dive covers more: https://bit.ly/44woeZX

Healthcare’s biggest cyber risks often hide in plain sight. Join our 30-minute webinar to learn how to uncover hidden exposures across legacy systems, IoT/IoMT, and third-party connections—before patient care is impacted. Register now: https://bit.ly/490HsbC

The DCShadow attack is a critical threat to Active Directory integrity. 🚨 Our blog details the step-by-step execution—from credential dumping to pushing malicious changes—and demonstrates how Trellix NDR detects these covert behavioral anomalies and replication misuse (MITRE T1207) in near-real time. Read the blog by Maulik Maheta and chao sun for more: https://bit.ly/4s0BzUr

As the year draws to a close, the entire Trellix team extends our appreciation. 🌟 To our valued customers, thank you for trusting us to secure your future. To our dedicated partners, thank you for your collaboration and commitment. And to our employees, thank you for your hard work and passion throughout the year. Wishing you all a safe, joyful, and peaceful holiday season!

Missed our webinar? Good news! You can now watch "Beyond the Feed" on demand. 💻 Join Trellix experts Anne An and Alyssa Parenteau for this 30-minute session where they’ll equip you with best practices to: ⚙️ Integrate threat intelligence 🎯 Prioritize vulnerabilities ⏱️ Reduce reaction times Watch now and empower your team! ⬇️ https://bit.ly/3Ietppm

The wait is over! Trellix NDR 4.1 is here, delivering powerful new capabilities to elevate your security operations. Key takeaways: ⚡ No-code hyperautomation ⚙️ Deep IT/OT visibility 🛡️ AI-based detections for on-prem/air-gapped environments 🔄 IDPS upgrade path 🎣 Network phishing detection ➡️ Read the blog: https://bit.ly/4aSp4UG ➡️ Read the press release: https://bit.ly/4sf29cC

In this exclusive interview with CIO Magazine®, Trellix CIO Randy Dougherty shares his approach to staying ahead of the curve and navigating the complexities facing technology leaders today — a must-read for fellow CIOs and IT professionals. Read the full feature: https://bit.ly/4j1oV3o