Trellix Newsletter
March 2026
Greetings,
In this edition, we’re diving into the latest strategies for proactive defense. Join our March 31 webinar to unpack real-world threat hunting cases with our SecondSight team and get insights on evolving Iranian cyber capabilities.
Explore our new blogs, upcoming events, and product updates to stay resilient!
Cheers,
The Trellix Team
Lessons from Trellix SecondSight Top Threat Hunting Cases
Don’t miss out! Join Trellix VP of Threat Intelligence Strategy, John Fokker, and Threat Hunter Duy-Phuc Pham on Wednesday, March 31, as we unpack five real-world case studies from our latest SecondSight Threat Report. We will break down the "Hunter’s Logic" required to:
- Identify how attackers use legitimate software to mask execution.
- Deconstruct weeks-long social engineering ploys that bypass traditional filters.
- Hunt for smuggled payloads hidden within common cloud services.
- See how Trellix SecondSight identifies adversaries like Iran and validates exposure before escalation.
Secure your seat for this executive briefing
Can’t make it live? Register and we’ll make sure you get a copy of the recording and the report.
Latest Mind of the CISO Report: The Future of Cyber Resilence
In 2026, cyber resilience is being shaped around hybrid infrastructure and AI innovation to navigate a fragmented threat landscape. This edition of Mind of the CISO explores how organizations are securing the convergence of operational technology (OT) and IT while preparing for the next generation of intelligent, AI-driven threats.
Sneak Peek: Key Insights for 2026
- Essential Convergence: 96% of CISOs agree that the convergence of OT and IT security is essential for protecting critical infrastructure from emerging threats.
- The Preparedness Gap: 88% agree this convergence exposes new challenges that many organizations are not yet prepared to address.
- Regulatory Hurdles: 45% of CISOs say keeping up with the pace of regulatory changes is the main challenge to complying with cybersecurity regulations.
Threat Intel from the Trellix Advanced Research Center
Access in-depth, weekly updates on the top 10 latest threats our researchers have identified. The Trellix Advanced Research Center provides expert research and timely threat intelligence to help you stay ahead. Don't miss out! Check back regularly for the latest updates.
Learn moreThe latest cybersecurity threats
Current malware threats have been identified by our threat research team.
Click on one to learn how to best protect your organization.
What's new in your Trellix products
Endpoint Security
Beyond the Cloud – Trellix Earns 2026 OT Security Certification
The results are in! Trellix is honored to be one of the few vendors to earn the 2026 AV-Comparatives OT Security Certification. Find out how our Endpoint Security solution achieved a 100% protection rate against IT-based attacks in industrial environments in completely offline environments.
Network Detection and Response
Optimize Trellix NX: Leveraging Best Practices and Threat Intel
Join our Trellix Guardians to learn how to fully operationalize your network security and get the most out of your NX deployment. Learn expert strategies to apply threat intel to live traffic and build a proactive, unified defense in any environment. .
Email Security
Fileless Multi-Stage Remcos RAT: From Phishing to Memory-Resident Execution
In this blog, we break down a sophisticated phishing campaign using "fileless" tactics to slip the Remcos RAT past traditional defenses. Learn how these multi-stage attacks hide in your system’s memory and what you can do to stop them.
Data Security
Update Trellix Drive Encryption 8.1.1 to Prevent Boot Failures
Microsoft is retiring 2011 UEFI Certificates, which impacts many Trellix Drive Encryption customers using Windows operating systems. To avoid system boot failures, customers should upgrade to Drive Encryption 8.1.1 by June 2026.
Security Operations
Getting Roasted? Trellix Helix Sees through AS-REP Attack
Is your Active Directory "getting roasted"? Attackers use AS-REP Roasting to crack passwords offline without ever triggering a lockout. See how Trellix Helix uses behavioral detection to stop this sneaky Kerberos exploit in its tracks.
Threat Intelligence
The Iranian Cyber Capability 2026
As geopolitical tensions shift, so does the cyber front. In our latest assessment of Iranian cyber capabilities we break down active groups, new structures, and evolving tradecraft. Plus, we’ve released our full dataset on GitHub so the community can hunt for these threats immediately.
Trellix Thrive Resources
Access the Trellix Thrive Portal, our comprehensive customer support experience. It’s your go-to spot for support, education, and professional services.
Thrive ResourcesEvents and more
New resources
Recent Blogs and Conversations
- Dark Web Roast February 2026 Edition
- ICS Security for Australian Critical Infrastructure
- Beyond the Cloud – Trellix Earns 2026 OT Security Certification
- Why Trellix SecondSight Is Like Gaining a Team of Elite Threat Hunters
- European Sovereignty-By-Design: Trellix’s Foundation for Operational Autonomy and Local Control
- The Ghost SPN Attack: Catching Stealthy Kerberoasting Before It's Too Late Using Trellix NDR
- Getting Roasted? Trellix Helix sees through AS-REP Attack
- Malware-As-A-Service Redefined: Why XWorm is outpacing every other RAT in the underground malware market
- Fileless Multi-Stage Remcos RAT: From Phishing to Memory-Resident Execution
- The Iranian Cyber Capability 2026