Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More

SpiderLabs Blog

Explore the latest threats, critical vulnerability disclosures, cutting-edge research, and intelligence from our elite global threat experts.

circleradial-blogs

Machine Learning Update 1

May 20, 2013 | Ryan Merritt

It has been almost exactly a month since my last post regarding the new project ...

SpiderLabs Radio May 17, 2013 w/ Space Rogue

May 17, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Analysis of Malicious Document Files Spammed by Cutwail

May 15, 2013 | Rodel Mendrez

In our Global Security Report, we highlighted a zero day vulnerability in the ...

Microsoft Patch Tuesday, May 2013

May 14, 2013

I keep hoping for an easy relaxing Patch Tuesday of say, only two or three ...

TWSL2013-002: Multiple XSS Vulnerabilities in The Bug Genie

May 14, 2013

Trustwave SpiderLabs has published a new security advisory for multiple ...

Securing Continuous Integration Services

May 13, 2013 | Jonathan Claudius

Over the last couple weeks, I've had the distinct privilege to share some of my ...

Introducing the Burp Notes Extension

May 10, 2013 | Austin Lane

As a Security Analyst I spend a significant amount of time working in tools ...

5 ways to protect your E-Commerce site

May 10, 2013 | Grayson Lenik

The Trustwave Spiderlabs team frequently responds to E-commerce data breaches. ...

SpiderLabs Radio May 10, 2013 w/ Space Rogue

May 10, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Microsoft Advance Notification for May 2013

May 09, 2013 | Space Rogue

There will be ten bulletins released by Microsoft next Tuesday and one of those ...

Alina: Casting a Shadow on POS

May 08, 2013 | Josh Grunzweig

Over the pastfew months, a number of malware families targeting Point of Sale ...

Mayday! 0-Day

May 05, 2013

While many workers around the world were celebrating the May 1st events, the US ...

SpiderLabs Radio May 3, 2013 w/ Space Rogue

May 03, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Living ...

XML External Entity (XXE) Execution Disabled in ModSecurity v2.7.3

April 30, 2013 | Ryan Barnett

On February 27, 2013, the ModSecurity project team was notified by security ...

SpiderLabs Radio April 26, 2013 w/ Space Rogue

April 26, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers HostGator, ...

Basic Packers: Easy As Pie

April 24, 2013 | Josh Grunzweig

Throughout Trustwave SpiderLabs' many forensicinvestigations, we often stumble ...

Accidental Stored XSS Flaw in Zemanta 'Related Posts' Plugin for TypePad

April 22, 2013 | Ryan Barnett

Note that the vulnerability described here was fixed by Zemanta.

SpiderLabs Radio April 19, 2013 w/ Space Rogue

April 20, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Schnucks, ...

Java is So Confusing...

April 19, 2013 | Anat (Fox) Davidi

It's been a short while, but we find ourselves again with a Java vulnerability ...

Cracking IKE Mission:Improbable (Part 2)

April 19, 2013 | Daniel Turner

A couple of weeks ago I posted Part 1 of Cracking IKE, detailing some useful ...

Large scale malicious spam campaign exploiting Boston bombing

April 18, 2013

In our latest Global Security Report, we noted malicious spam campaigns were on ...

Me Myself and I, Robot

April 17, 2013 | Ryan Merritt

Growing up I read every book my library had to offer by Jules Verne and Isaac ...

Defending WordPress Logins from Brute Force Attacks

April 16, 2013 | Ryan Barnett

As has been reported by many news outlets, WordPress login pages have been ...

Microsoft Recalls Update

April 12, 2013 | Space Rogue

Microsoft has recalled part of an update that was release earlier this week as ...

SpiderLabs Radio April 12, 2013 w/ Space Rogue

April 12, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers OpIsreal, ...

Restricting Adobe CQ Admin Logins with Trustwave WAFs

April 11, 2013 | Ryan Barnett

One of the many useful features of a web application firewall (WAF) is its ...

Ransomware Author 3's Farm Animals

April 10, 2013 | Dan Meged

As security researchers, our virtual journey in revealing new threats on the ...

Microsoft Patch Tuesday, April 2013

April 09, 2013 | Space Rogue

This month we have nine bulletins, two critical covering just fourteen CVEs. ...