Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More

SpiderLabs Blog

Explore the latest threats, critical vulnerability disclosures, cutting-edge research, and intelligence from our elite global threat experts.

circleradial-blogs

The Technical Aspects of Exploiting IE Zero-Day CVE-2013-3897

October 10, 2013 | Trustwave SpiderLabs

Just two days ago we announced thediscovery of in-the-wild attacks that used ...

Having a Fiesta With Ploutus

October 10, 2013 | Josh Grunzweig

A short while ago, SafenSoft reported a new family ofmalware, named 'Ploutus', ...

AV Vendors Targeted in Defacement Campaign

October 08, 2013 | Ryan Barnett

Attacked Sites The KDMS hacking team recently defaced several popular websites ...

Exploiting Integer Based SQL Injection In Nested SQL Queries

October 08, 2013 | Sasha Zivojinovic

SQL injection involving nested queries and arithmetic evaluation.

Microsoft Patch Tuesday, October 2013

October 08, 2013

Here in Philadelphia this month the localweather people are calling it ...

Another Day, SpiderLabs Discovers Another IE Zero-Day

October 08, 2013

We at SpiderLabs investigate many suspicious webpages on adaily basis. ...

Microsoft Advance Notification for October 2013

October 07, 2013 | Space Rogue

It is on a monthly schedule but for some reason Microsoft's Patch Tuesday ...

SpiderLabs Radio October 4, 2013 w/ Space Rogue

October 04, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

TWSL2013-029: Information Disclosure Vulnerability in QNAP Photo Station

September 30, 2013

Photo Station, a web application, allows users to upload and share photos over ...

Installing VMware Tools on Kali Linux and Some Debugging Basics

September 30, 2013 | Christophe De La Fuente

I have been using Backtrack for a while now and decided to switch to Kali ...

SpiderLabs Radio September 27, 2013 w/ Space Rogue

September 27, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

ModSecurity for Java - BETA Testers Needed

September 27, 2013

Over the course of the summer of 2013, the ModSecurity team participated in ...

Wendel's Small Hacking Tricks - Killing Processes from the Microsoft Windows Command Line interface.

September 25, 2013 | Wendel Guglielmetti Henrique

Since 2003 a large part of my workday has been devoted solely to hacking ...

Is Oracle Application Server End-of-Life?

September 20, 2013

I was asked recently to review a web server running Oracle Application Server. ...

SpiderLabs Radio September 20, 2013 w/ Space Rogue

September 20, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

ModSecurity XSS Evasion Challenge Results

September 20, 2013

On July 30th, we announced our public ModSecurity XSS Evasion Challenge. This ...

Hey, can I use your server for spamming?

September 19, 2013 | Phil Hay

Over the last few months I have encountered two separate cases of our customers ...

Top Five Ways SpiderLabs Got Domain Admin on Your Internal Network

September 19, 2013 | Theresa

It's always surprising how insecure some internal networks turn out to be. Less ...

Vino VNC Server Remote Persistent DoS Vulnerability

September 16, 2013 | Jonathan Claudius

Last week, I was making some performance enhancements to theVNC protocol ...

Trust for Sale

September 16, 2013

Let's, for a moment, get into the mind of a cyber criminal:

SpiderLabs Radio September 13, 2013 w/ Space Rogue

September 13, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Microsoft Patch Tuesday, September 2013

September 10, 2013 | Robert Foggia

In Chicago, it's been a roller coaster of a summer with cold weather to now ...

SpiderLabs Radio September 6, 2013 w/ Space Rogue

September 06, 2013

Microsoft Advance Notification for September 2013

September 05, 2013 | Space Rogue

This month Microsoft continues the recent tradition of large Patch Tuesday with ...

SpiderLabs Radio August 30, 2013 w/ Space Rogue

August 30, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Setting HoneyTraps with ModSecurity: Adding Fake robots.txt Disallow Entries

August 26, 2013 | Ryan Barnett

The following blog post is taken from Recipe 3-2: Adding Fake robots.txt ...

SpiderLabs Radio August 23, 2013 w/ Space Rogue

August 23, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Multiple Web Application Vulnerabilities in RockMongo

August 19, 2013

During a recent code review for a client, I also took a brief look at a tool ...