Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More

SpiderLabs Blog

Explore the latest threats, critical vulnerability disclosures, cutting-edge research, and intelligence from our elite global threat experts.

circleradial-blogs

SpiderLabs Radio April 5, 2013 w/ Space Rogue

April 05, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Carberp, ...

Web Application Defender's Cookbook: CCDC Blue Team Cheatsheet

April 05, 2013 | Ryan Barnett

Trustwave is a corporate sponsor of the National Collegiate Cyber Defense ...

ModSecurity User Survey 2013

April 05, 2013 | Ryan Barnett

The ModSecurity web application firewall project has grown a lot in the past ...

Microsoft Advance Notification for April 2013

April 04, 2013 | Space Rogue

Ah, April, for most of us the weather is turning warm, birds return to their ...

Jamming With WordPress Sessions

April 02, 2013 | Robert Rowley

Let's talk about some targeted attacks where session management can be targeted ...

Breaking the Authentication Chain

April 01, 2013 | Robert Rowley

This little post is going to talk about how authentication goes beyond just ...

SpiderLabs Radio March 29, 2013 w/ Space Rogue

March 29, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers OMG DDoS ...

An Analysis Of CVE-2017-5638

March 27, 2013 | Eric Rafaloff

A detailed analysis of the Apache Struts server-side template injection ...

Cracking IKE Mission:Improbable (Part 1)

March 27, 2013 | Daniel Chechik

All too often during pen tests I still find VPN endpoints configured to allow ...

Hooked on Packets: Reading PCAPs for D Students - Preview

March 26, 2013 | Ryan Linn

SOURCE Boston is coming up in April, and Mike Ryan and I are giving a ...

Did Grum Really Get Killed?

March 25, 2013

For several years before July 2012 takedown, Grum was one of the notorious spam ...

Baiting Attack Exercise – The Old School Way Still Works

March 22, 2013

In the past few months, we have had quite a few social engineering and ...

SpiderLabs Radio March 22, 2013 w/ Space Rogue

March 22, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Korea, ...

SpiderLabs Radio March 15, 2013 w/ Space Rogue

March 21, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers China, ...

Mongodb - Security Weaknesses in a typical NoSQL database

March 21, 2013 | David Kirkpatrick

Over the last year or so, I've noticed 2 ports appearing more frequently during ...

Mimicking Attackers: Building Malware for CCDC

March 12, 2013 | Josh Grunzweig

This past weekend my fellow coworkers/friends and myself had the opportunity ...

Fresh Coffee Served by CoolEK

March 12, 2013 | Moshe Basanchig

As you may already know, the past few months have been problematic to Oracle ...

Microsoft Patch Tuesday, March 2013 – Happy St. Patch-rick's Day!

March 12, 2013 | Space Rogue

Saint Patrick's day is quickly becoming Saint Patrick's week. Some cities have ...

SpiderLabs Radio March 8, 2013 w/ Space Rogue

March 08, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Pwn2own, ...

Microsoft Advance Notification for March 2013

March 07, 2013 | Space Rogue

First the raw numbers; we have seven bulletins this month, four critical, and ...

Upcoming Webinars: 2013 Trustwave Global Security Report Threat Trends

March 07, 2013

A few weeks ago we released the 2013 LevelBlue Global Security Report. This ...

OS Image Wrangling

March 07, 2013 | Nathan Drier

On most PenTests, alot of research goes into the things you find along the way. ...

My 2013 RSA Conference Keynote the Jimmy Kimmel Influence

March 07, 2013

Kelihos is Dead… No wait… Long Live Kelihos! Again!

March 06, 2013

This post is inspired by a news article which highlighted a recent presentation ...

The Life Cycle of Web Server Botnet Recruitment

March 06, 2013

This blog post is an excerpt taken from the recently released Global Security ...

You Injected What? Where?

March 05, 2013 | Theresa

While harder to detect, there are still some instances of websites exploitable ...

New Year, New Data, Same Mistakes: Passwords

March 04, 2013 | Barry O’Connell

Like a late-arriving Christmas, one of the gifts of the new year is the release ...

Cyber' Security - must become a board level issue in the UK ...really?

March 04, 2013 | SpiderLabs Researcher

The UK Government is "committed to helpingreduce vulnerability to attacks and ...