Kernel Buffer Overflow in Trusteer Rapport for MacOS
December 20, 2018 | Neil Kettle
Trustwave recently reported a Kernel based vulnerability in a driver bundled ...
Rise of the Webminers
December 19, 2018 | Oren Mashal
About a year ago webminers began to appear on more and more websites. It was ...
Hacking Online Coupons
December 18, 2018 | Lena Frid
We all shop online. How many times, just before placing an online order, have ...
Microsoft Patch Tuesday, December 2018
December 11, 2018 | Karl Sigler
The last Patch Tuesday of 2018 is here and we are easing into the New Year with ...
Magecart - An overview and defense mechanisms
December 06, 2018 | Victor Hora
Summary This blog post offers insight into Magecart and offers advice on how to ...
Scavenger: Post-Exploitation Tool for Collecting Vital Data
December 05, 2018 | Philip Pieterse
‘Scavenger’ - definition [noun]: a person who searches for and collects ...
Announcing ModSecurity version 2.9.3
December 05, 2018 | Victor Hora
We are happy to announce ModSecurity version 2.9.3!
Decoding Hancitor Malware with Suricata and Lua
November 27, 2018 | Bryant Smith
Many types of malware send and receive data via HTTP. They may either be ...
Exploring and Modifying Android and Java Applications for Security Research
November 27, 2018 | Martin Rakhmanov
Sometimes pentesters and security researchers need to modify existing Java ...
Taking Advantage of AJAX for Account Enumeration
November 27, 2018 | Manuel Nader
Context AJAX stands for Asynchronous JavaScript And XML. It’s a set of web ...
Microsoft Patch Tuesday, November 2018
November 27, 2018 | Karl Sigler
The second to last Patch Tuesday of 2018 is here with patches for 55 CVEs. This ...
Sheepl : Automating People for Red and Blue Tradecraft
November 27, 2018 | Matt Lorentzen
Whilst there is a wealth of information out there about how to build ...
ModSecurity v3.0.3: What To Expect
November 27, 2018 | Felipe "Zimmerle" Costa
At precisely 155 commits ahead of the latest version, ModSecurity version 3.0.3 ...
Demystifying Obfuscation Used in the Thanksgiving Spam Campaign
November 26, 2018 | Rodel Mendrez
During Thanksgiving week, we noticed this quite unusual XML-format MS Office ...
Hacker's Wish Come True After Infecting Visitors of Make-A-Wish Website With Cryptojacking
November 19, 2018 | Simon Kenin
After coming back from a vacation, the first thing to do is catch up with what ...
DOH! DNS Over HTTPS Poses Possible Risks to Enterprises
October 26, 2018 | David Middlehurst
Introduction David Middlehurst of Trustwave SpiderLabs presented at the first ...
10 Years On – A Look Back at MS08-067
October 23, 2018 | Trustwave SpiderLabs
It has been ten years since the release of MS08-067. Unlike many of the other ...
Red Alert v2.0: Misadventures in Reversing Android Bot Malware
October 22, 2018 | Rodel Mendrez
(Analysis by Rodel Mendrez and Lloyd Macrohon)
SingHealth Data Breach – An Analytical Perspective
October 22, 2018
Executive Summary On July 20th 2018, the Singapore authorities announced1 that ...
Unpatched Remote Code Execution in Reprise License Manager
October 22, 2018
During a recent penetration testing engagement, I came across a particularly ...
WD My Cloud EX2 Serves Your Files to Anyone
October 22, 2018 | Martin Rakhmanov
Western Digital's My Cloud is a popular storage/backup device that lets users ...
Underground Code of Honor – Part 1 of 3
October 22, 2018 | SpiderLabs Researcher
"We are all honorable men here, we do not have to give each other assurances as ...
TWSL2011-004: Cross-Site Scripting Vulnerability in ZyXEL ZyWALL 70 Firewall
October 22, 2018 | Josh Grunzweig
The SpiderLabs team at Trustwave published a new advisory today, which details ...
The Underground Job Market – Part 2 of 3
October 18, 2018 | SpiderLabs Researcher
"Leave your ego at the door every morning, and just do some truly great work. ...
Microsoft Patch Tuesday, October 2018
October 09, 2018 | Karl Sigler
October's Patch Tuesday is here and with it come patches for 49 CVEs and a ...
Credential Leak Flaws in Windows PureVPN Client
September 27, 2018
Using a VPN (Virtual Private Network) can bring many advantages, particularly ...
CVE-2018-16962: Webroot SecureAnywhere macOS Kernel Level Memory Corruption
September 13, 2018 | Neil Kettle
Trustwave recently discovered a locally exploitable issue in the macOS version ...
Patch Tuesday, September 2018
September 04, 2018 | Karl Sigler
September's Patch Tuesday is here with patches for 61 CVEs and two roll up ...