SpiderLabs Blog
Explore the latest threats, critical vulnerability disclosures, cutting-edge research, and intelligence from our elite global threat experts.
SpiderLabs Radio May 3, 2013 w/ Space Rogue
May 03, 2013
This week's episode of SpiderLabs Radio hosted by Space Rogue covers Living ...
XML External Entity (XXE) Execution Disabled in ModSecurity v2.7.3
April 30, 2013 | Ryan Barnett
On February 27, 2013, the ModSecurity project team was notified by security ...
SpiderLabs Radio April 26, 2013 w/ Space Rogue
April 26, 2013
This week's episode of SpiderLabs Radio hosted by Space Rogue covers HostGator, ...
Basic Packers: Easy As Pie
April 24, 2013 | Josh Grunzweig
Throughout Trustwave SpiderLabs' many forensicinvestigations, we often stumble ...
Accidental Stored XSS Flaw in Zemanta 'Related Posts' Plugin for TypePad
April 22, 2013 | Ryan Barnett
Note that the vulnerability described here was fixed by Zemanta.
SpiderLabs Radio April 19, 2013 w/ Space Rogue
April 20, 2013
This week's episode of SpiderLabs Radio hosted by Space Rogue covers Schnucks, ...
Java is So Confusing...
April 19, 2013 | Anat (Fox) Davidi
It's been a short while, but we find ourselves again with a Java vulnerability ...
Cracking IKE Mission:Improbable (Part 2)
April 19, 2013 | Daniel Turner
A couple of weeks ago I posted Part 1 of Cracking IKE, detailing some useful ...
Large scale malicious spam campaign exploiting Boston bombing
April 18, 2013
In our latest Global Security Report, we noted malicious spam campaigns were on ...
Me Myself and I, Robot
April 17, 2013 | Ryan Merritt
Growing up I read every book my library had to offer by Jules Verne and Isaac ...
Defending WordPress Logins from Brute Force Attacks
April 16, 2013 | Ryan Barnett
As has been reported by many news outlets, WordPress login pages have been ...
Microsoft Recalls Update
April 12, 2013 | Space Rogue
Microsoft has recalled part of an update that was release earlier this week as ...
SpiderLabs Radio April 12, 2013 w/ Space Rogue
April 12, 2013
This week's episode of SpiderLabs Radio hosted by Space Rogue covers OpIsreal, ...
Restricting Adobe CQ Admin Logins with Trustwave WAFs
April 11, 2013 | Ryan Barnett
One of the many useful features of a web application firewall (WAF) is its ...
Ransomware Author 3's Farm Animals
April 10, 2013 | Dan Meged
As security researchers, our virtual journey in revealing new threats on the ...
Microsoft Patch Tuesday, April 2013
April 09, 2013 | Space Rogue
This month we have nine bulletins, two critical covering just fourteen CVEs. ...
SpiderLabs Radio April 5, 2013 w/ Space Rogue
April 05, 2013
This week's episode of SpiderLabs Radio hosted by Space Rogue covers Carberp, ...
Web Application Defender's Cookbook: CCDC Blue Team Cheatsheet
April 05, 2013 | Ryan Barnett
Trustwave is a corporate sponsor of the National Collegiate Cyber Defense ...
ModSecurity User Survey 2013
April 05, 2013 | Ryan Barnett
The ModSecurity web application firewall project has grown a lot in the past ...
Microsoft Advance Notification for April 2013
April 04, 2013 | Space Rogue
Ah, April, for most of us the weather is turning warm, birds return to their ...
Jamming With WordPress Sessions
April 02, 2013 | Robert Rowley
Let's talk about some targeted attacks where session management can be targeted ...
Breaking the Authentication Chain
April 01, 2013 | Robert Rowley
This little post is going to talk about how authentication goes beyond just ...
SpiderLabs Radio March 29, 2013 w/ Space Rogue
March 29, 2013
This week's episode of SpiderLabs Radio hosted by Space Rogue covers OMG DDoS ...
An Analysis Of CVE-2017-5638
March 27, 2013 | Eric Rafaloff
A detailed analysis of the Apache Struts server-side template injection ...
Cracking IKE Mission:Improbable (Part 1)
March 27, 2013 | Daniel Chechik
All too often during pen tests I still find VPN endpoints configured to allow ...
Hooked on Packets: Reading PCAPs for D Students - Preview
March 26, 2013 | Ryan Linn
SOURCE Boston is coming up in April, and Mike Ryan and I are giving a ...
Did Grum Really Get Killed?
March 25, 2013
For several years before July 2012 takedown, Grum was one of the notorious spam ...
Baiting Attack Exercise – The Old School Way Still Works
March 22, 2013
In the past few months, we have had quite a few social engineering and ...