Update from Trustwave SpiderLabs EMEA, London

April 29, 2012 | Admin

It was a hectic week in London. In case you hadn't heard its was InfoSec Europe ...

Brazilian Banking Malware: Pay Your Bill Slacker!

April 26, 2012 | Admin

I recently got wind of an interesting little sample that I believe originated ...

WordPress 3.3.2 Addresses Setup XSS Vulnerabilities

April 25, 2012 | Jonathan Claudius

Back in January we released a security advisory for WordPress, which included ...

Pwning a Spammer's Keylogger

April 25, 2012 | Rodel Mendrez

Recently, while scrounging around our spam traps, I spotted this ordinary piece ...

Winning! PenTest Manager pwns SC Europe Innovation Award

April 25, 2012 | Admin

We Won! :-) Thanks to all the hard work of the Trustwave's Engineering teams, ...

Once Again Cutwail Spam Campaign Ends Up In Phoenix Exploit Kit

April 23, 2012 | Daniel Chechik

In the past few months, a certain cybercrime group operates a large stable ...

Come and Join Us at InfoSecurity

April 23, 2012 | Ziv Mador

This week we will be presenting and speaking at InfoSecurity, Europe's No.1 ...

SC Magazine Innovation Award Finalist - Trustwave SpiderLabs PenTest Manager

April 20, 2012 | Admin

PenTest Manager, the cutting edge penetration test management and reporting ...

[Honeypot Alert] Joomla com_s5clanroster Local File Inclusion Attacks

April 16, 2012 | Ryan Barnett

Our web honeypots picked up some increased scanning for the following ...

Australian Apple Store Customers Targeted by Phishers

April 13, 2012 | Rodel Mendrez

Recently, we came across a phishing attack targeting Australian Apple Store ...

Smart Meter Attacks: Old Vectors Die Hard

April 12, 2012 | Barry O’Connell

Much has been made of the recent attacks against a Puerto Rican utility's smart ...

TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow sFlow Analyzer

April 12, 2012 | Admin

Trustwave SpiderLabs has published a new advisory yesterday for multiple ...

[Honeypot Alert] Zeroboard now_connect() Remote Code Execution Attacks

April 11, 2012 | Ryan Barnett

Our web honeypots recently identified attacks for CVE-2009-4834 which is a ...

RCE root in all current Samba versions

April 10, 2012 | Space Rogue

While perusing the change log for the release of SAMBA that was pushed out ...

PenTest Manager: Now with Secure File Transfer

March 29, 2012 | Admin

PenTest Manager, the cutting-edge reporting tool created by Trustwave ...

Hack Your Own Code: Advanced training for Developers

March 28, 2012 | nosteve

Mike Park and Marc Bown recently locked themselves in a conference room, ...

ModSecurity Advanced Topic of the Week: Automated Virtual Patching using OWASP Zed Attack Proxy

March 27, 2012 | Ryan Barnett

Automated Virtual Patching using OWASP Zed Attack Proxy The SpiderLabs Research ...

ModSecurity Advanced Topic of the Week: Automated Virtual Patching using OWASP Zed Attack Proxy

March 27, 2012 | Ryan Barnett

Automated Virtual Patching using OWASP Zed Attack Proxy The SpiderLabs Research ...

SpiderLabs Radio Podcast: March 2012

March 25, 2012 | Admin

We have just released the SpiderLabs Radio March Edition. This show is packed ...

TWSL2012-005: Cross-Site Scripting Vulnerability in osCommerce Platform

March 23, 2012 | Robert Foggia

Trustwave SpiderLabs has published a new advisory today for a Cross-Site ...

[Honeypot Alert] Large Scale LFI Attack From Brazillian Domains

March 22, 2012 | Ryan Barnett

Our web sensors picked up a big uptick in Local File Inclusion (LFI) attacks ...

A New Neighbor in Town: The Nuclear Pack v2.0 Exploit Kit

March 22, 2012 | Admin

In the past few years, cybercriminals have been increasingly using exploit kits ...

Dirty RAT Eats Nate's Banana

March 21, 2012 | Josh Grunzweig

I've got a real treat for everyone today, as I received approval to blog about ...

LIKE, omg!

March 15, 2012 | Dan Crowley

If you read this blog, you might have seen my earlier post regarding my ...

The Race for MS12-020

March 15, 2012 | Space Rogue

So if you missed our previous blog post on the MS Patch Tuesday earlier this ...

[Honeypot Alert] Zen Cart 'admin/sqlpatch.php' SQL Injection Attacks

March 14, 2012 | Ryan Barnett

SpiderLabs T-Shirt Designs 2006-2011

March 14, 2012 | SpiderLabs Anterior

[Honeypot Alert] Status Report for February 2012

March 12, 2012 | Ryan Barnett

Monthly Web Honeypot Status Report We have received a tremendous amount of ...