Trend Micro Anti-Threat Toolkit 'will run malware – if its filename is cmd.exe or regedit.exe' Try not to save files to your Windows PC called cmd.exe or regedit.exe October 21, 2019 https://www.theregister.co.uk/2019/10/21/flaw_trend_micro/
Updated article: Trend Micro: Security Bulletin: Trend Micro Anti-Threat Toolkit (ATTK) RCE Vulnerability
Trend Micro Patches More Vulnerabilities in Anti-Threat Toolkit February 3, 2020 https://www.securityweek.com/trend-micro-patches-more-vulnerabilities-anti-threat-toolkit