Microsoft Advance Notification for May 2013

May 09, 2013 | Space Rogue

There will be ten bulletins released by Microsoft next Tuesday and one of those ...

Alina: Casting a Shadow on POS

May 08, 2013 | Josh Grunzweig

Over the pastfew months, a number of malware families targeting Point of Sale ...

Mayday! 0-Day

May 05, 2013 | Admin

While many workers around the world were celebrating the May 1st events, the US ...

SpiderLabs Radio May 3, 2013 w/ Space Rogue

May 03, 2013 | Admin

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Living ...

XML External Entity (XXE) Execution Disabled in ModSecurity v2.7.3

April 30, 2013 | Ryan Barnett

On February 27, 2013, the ModSecurity project team was notified by security ...

SpiderLabs Radio April 26, 2013 w/ Space Rogue

April 26, 2013 | Admin

This week's episode of SpiderLabs Radio hosted by Space Rogue covers HostGator, ...

Basic Packers: Easy As Pie

April 24, 2013 | Josh Grunzweig

Throughout Trustwave SpiderLabs' many forensicinvestigations, we often stumble ...

Accidental Stored XSS Flaw in Zemanta 'Related Posts' Plugin for TypePad

April 22, 2013 | Ryan Barnett

Note that the vulnerability described here was fixed by Zemanta.

SpiderLabs Radio April 19, 2013 w/ Space Rogue

April 20, 2013 | Admin

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Schnucks, ...

Java is So Confusing...

April 19, 2013 | Anat (Fox) Davidi

It's been a short while, but we find ourselves again with a Java vulnerability ...

Cracking IKE Mission:Improbable (Part 2)

April 19, 2013 | Daniel Turner

A couple of weeks ago I posted Part 1 of Cracking IKE, detailing some useful ...

Large scale malicious spam campaign exploiting Boston bombing

April 18, 2013 | Admin

In our latest Global Security Report, we noted malicious spam campaigns were on ...

Me Myself and I, Robot

April 17, 2013 | Ryan Merritt

Growing up I read every book my library had to offer by Jules Verne and Isaac ...

Defending WordPress Logins from Brute Force Attacks

April 16, 2013 | Ryan Barnett

As has been reported by many news outlets , WordPress login pages have been ...

Microsoft Recalls Update

April 12, 2013 | Space Rogue

Microsoft has recalled part of an update that was release earlier this week as ...

SpiderLabs Radio April 12, 2013 w/ Space Rogue

April 12, 2013 | Admin

This week's episode of SpiderLabs Radio hosted by Space Rogue covers OpIsreal, ...

Restricting Adobe CQ Admin Logins with Trustwave WAFs

April 11, 2013 | Ryan Barnett

One of the many useful features of a web application firewall (WAF) is its ...

Ransomware Author 3's Farm Animals

April 10, 2013 | Dan Meged

As security researchers, our virtual journey in revealing new threats on the ...

SpiderLabs Radio April 5, 2013 w/ Space Rogue

April 05, 2013 | Admin

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Carberp, ...

Web Application Defender's Cookbook: CCDC Blue Team Cheatsheet

April 05, 2013 | Ryan Barnett

Trustwave is a corporate sponsor of the National Collegiate Cyber Defense ...

ModSecurity User Survey 2013

April 05, 2013 | Ryan Barnett

The ModSecurity web application firewall project has grown a lot in the past ...

Microsoft Advance Notification for April 2013

April 04, 2013 | Space Rogue

Ah, April, for most of us the weather is turning warm, birds return to their ...

Jamming With WordPress Sessions

April 02, 2013 | Robert Rowley

Let's talk about some targeted attacks where session management can be targeted ...

Breaking the Authentication Chain

April 01, 2013 | Robert Rowley

This little post is going to talk about how authentication goes beyond just ...

SpiderLabs Radio March 29, 2013 w/ Space Rogue

March 29, 2013 | Admin

This week's episode of SpiderLabs Radio hosted by Space Rogue covers OMG DDoS ...

Cracking IKE Mission:Improbable (Part 1)

March 27, 2013 | Daniel Chechik

All too often during pen tests I still find VPN endpoints configured to allow ...

Hooked on Packets: Reading PCAPs for D Students - Preview

March 26, 2013 | Ryan Linn

SOURCE Boston is coming up in April, and Mike Ryan and I are giving a ...

Baiting Attack Exercise – The Old School Way Still Works

March 22, 2013 | Admin

In the past few months, we have had quite a few social engineering and ...