Password Protected Word Document Delivers HERMES Ransomware

Evading AV detection is part of a malware author's routine in crafting spam campaigns and an old ...

Read More

Money Laundering: Washing Your Greens in the Underground - Part 3 of 3

“Not having to worry about money is almost like not having to worry about dying.” - Mario Puzo

Read More

Latest Flash 0-Day (CVE-2018-15982) Leaves its Office Doc Friend Behind

CVE-2018-15982 is the Flash 0day that was patched by Adobe at the beginning of December. At the ...

Read More

Using IPv6 to Bypass Security

Introduction

Read More

Overview of Meltdown and Spectre

You have probably heard the news of new vulnerabilities that affect most major chipsets, including ...

Read More

Underground Code of Honor – Part 1 of 3

"We are all honorable men here, we do not have to give each other assurances as if we were ...

Read More

The Underground Job Market – Part 2 of 3

"Leave your ego at the door every morning, and just do some truly great work. Few things will make ...

Read More

Adobe Flash Player 0-Day (CVE-2018-5002)

An Adobe advisory regarding a zero-day vulnerability in Adobe Flash Player was published late last ...

Read More

ModSecurity Web Application Firewall - Commercial Rules Update (1)

We have released new commercial rules for ModSecurity Web Application Firewall (WAF) v2.9 and ...

Read More

The Petya/NotPetya Ransomware Campaign

This is an ongoing, emerging story and may be updated after posting.

Read More

ModSecurity Web Application Firewall - Commercial Rules Update

We have just released new commercial rules for ModSecurity Web Application Firewall (WAF) v2.9 and ...

Read More

Microsoft Patch Tuesday, June 2017

For the June 2017 Patch Tuesday Microsoft is releasing 97 CVEs, nearly double the number of ...

Read More

Microsoft Patch Tuesday, May 2017

Microsoft is releasing 56 CVEs for the May 2017 Patch Tuesday today. This includes 15 CVEs rated ...

Read More

Microsoft Patch Tuesday, April 2017

April Patch Tuesday is here and, like the change of the seasons, this release comes with changes in ...

Read More

Understanding and Discovering Open Redirect Vulnerabilities

One of the most common and largely overlooked vulnerabilities by web developers is Open Redirect ...

Read More

Microsoft Patch Tuesday, March 2017

We knew that the Microsoft's Valentine's gift to cancel Patch Tuesday on February 14th was only ...

Read More

Operation Grand Mars: a comprehensive profile of Carbanak activity in 2016/17

The Trustwave SpiderLabs team has been actively tracking a malicious campaign conducted by the ...

Read More

Microsoft Patch Tuesday, January 2017

It's everyone's favorite Patch Tuesday, January's Patch Tuesday. Historically January has always ...

Read More

Microsoft Patch Tuesday, December 2016

December's Patch Tuesday is here to greet you with the pleasant tidings of patches for all of your ...

Read More

New Carbanak / Anunak Attack Methodology

In the last month Trustwave was engaged by multiple hospitality businesses for investigations by an ...

Read More

Microsoft Patch Tuesday, November 2016

The November Patch Tuesday is here and it's a big one with 14 bulletins covering 68 unique CVEs. ...

Read More

Microsoft Patch Tuesday, October 2016

October has arrived with seasonal changes and a new Microsoft Patch Tuesday. This Patch Tuesday ...

Read More

Microsoft Patch Tuesday, September 2016

September's Patch Tuesday is upon us and it's the biggest one so far this year. While past months ...

Read More

Sundown EK – Stealing Its Way to the Top

Sundown is one of the newest Exploit Kits on the market these days, and like many up-and-coming ...

Read More

Microsoft Patch Tuesday, August 2016

Today is August's Patch and with only 9 bulletins with 27 unique CVEs it's one of the lightest ...

Read More

Microsoft Patch Tuesday, July 2016

July's Patch Tuesday is here and brings with it five bulletins rated Critical and 6 rated ...

Read More

Microsoft Patch Tuesday, June 2016

June's Patch Tuesday doesn't hold many surprises and is similar to the past several months with 17 ...

Read More

Zero Day Auction for the Masses

UPDATE: The seller once again lowered their price on the 6th of June to $85,000USD. This means that ...

Read More