Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More

SpiderLabs Blog

Explore the latest threats, critical vulnerability disclosures, cutting-edge research, and intelligence from our elite global threat experts.

circleradial-blogs

Fake Qantas Spam Campaign Leads to Andromeda Bot Infection

June 26, 2013

If you have booked a flight from Qantas recently, you might be expecting a ...

Digging Into the New Apache Injection Module

June 26, 2013 | Josh Grunzweig

I recently got a chance to dig into a couple variants of the new Apache ...

Exploiting Serialized XSS in Joomla! (return of the undead CVE)

June 26, 2013 | Robert Rowley

While reviewing Joomla! Vulnerabilities I felt a glitch in the matrix. Deja vu ...

Old Exploits Still Do the Trick

June 24, 2013 | Daniel Chechik

We are all aware that patching is very important. Many websites, however, take ...

Welcome to the Spider’s Lair

June 24, 2013

"Will you step into my parlor?" said the spider to the fly; "'Tis the prettiest ...

Debugging Android Libraries using IDA

June 22, 2013 | Neal Hindocha

During a recent test, I encountered a native JNI library used by an Android ...

The Problem With Networks .....

June 21, 2013 | David Kirkpatrick

Where do I start with this open-ended statement? I guess from a pen testing ...

SpiderLabs Radio June 21, 2013 w/ Space Rogue

June 21, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Wendel's Small Hacking Tricks - Microsoft SQL Server Edition

June 20, 2013 | Wendel Guglielmetti Henrique

Since 2003 a large part of my workday has been devoted solely to hacking ...

CBC-R: It's not just for padding oracles!

June 20, 2013

This is the short, technical version of a technique that I'll be writing more ...

[Honeypot Alert] Inside the Attacker's Toolbox: Webshell Usage Logging

June 19, 2013 | Ryan Barnett

In a previous blog post, we discussed the common lifecycle of web server botnet ...

Discovering BMW Car Systems: Getting Started

June 17, 2013 | Bruno Oliveira

Since I love both (in)security and cars, it is not uncommon for me to mix those ...

Sometimes, The PenTest Gods Shine On You

June 14, 2013 | Nathan Drier

Settling down for a hacking session usually means lots of hard work and a long ...

SpiderLabs Radio June 14, 2013 w/ Space Rogue

June 14, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

TWSL2013-006: Cross-Site Scripting Vulnerability in Coldbox

June 11, 2013 | Robert Foggia

Trustwave SpiderLabs has published a new advisory yesterday fora reflective ...

TWSL2013-007: Multiple Vulnerabilities in VLC Media Player - Web Interface

June 11, 2013

Yesterday, Trustwave SpiderLabs has published an advisory for multiple ...

Microsoft Patch Tuesday, June 2013

June 11, 2013

Finally, patch Tuesday has arrived and fortunately this one will be a real ...

Behind the Phish: Romance Perhaps?

June 10, 2013 | Phil Hay

When I look at the masses of spam we receive on a daily basis, I often wonder ...

[Honeypot Alert] Active Exploits Attempts for Plesk Vulnerability

June 10, 2013 | Ryan Barnett

Last week, hacker "kingcope" provided PoC expliot code for a Plesk 0-day on the ...

SpiderLabs Radio June 7, 2013 w/ Space Rogue

June 07, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

ModSecurity Updates: Nginx Stable Release and Google Summer of Code Participation

June 06, 2013 | Ryan Barnett

Availability of ModSecurity 2.7.4: Nginx Stable Release The ModSecurity ...

Microsoft Advance Notification for June 2013

June 06, 2013 | Space Rogue

So far this year we has had two Patch Tuesday months with seven bulletins ...

The Speed is from the Devil – Some Thoughts about Google’s New Disclosure Policy

June 03, 2013 | Ziv Mador

If you follow info-security news, you might have heard about Google considering ...

Alina: Following The Shadow Part 2

June 03, 2013 | Josh Grunzweig

This will likely be the final blog post in this series on the Alina Point of ...

Under The Hood: Linksys Remote Command Injection Vulnerabilities

May 31, 2013

Several models in the Linksys E-Series WiFi routers running their respective ...

ModSecurity Performance Recommendations

May 31, 2013 | Breno Silva

Sometimes we see ModSecurity users asking about performance in the mail-list. ...

SpiderLabs Radio May 31, 2013 w/ Space Rogue

May 31, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

SpiderLabs Radio May 24, 2013 w/ Space Rogue

May 24, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...