Microsoft Patch Tuesday, June 2013

Finally, patch Tuesday has arrived and fortunately this one will be a real treat. This release ...

Read More

TWSL2013-007: Multiple Vulnerabilities in VLC Media Player - Web Interface

Yesterday, Trustwave SpiderLabs has published an advisory for multiple vulnerabilities in the VLC ...

Read More

TWSL2013-006: Cross-Site Scripting Vulnerability in Coldbox

Trustwave SpiderLabs has published a new advisory yesterday fora reflective cross-site scripting ...

Read More

[Honeypot Alert] Active Exploits Attempts for Plesk Vulnerability

Last week, hacker "kingcope" provided PoC expliot code for a Plesk 0-day on the Full Disclosure ...

Read More

Behind the Phish: Romance Perhaps?

When I look at the masses of spam we receive on a daily basis, I often wonder who is behind it all. ...

Read More

SpiderLabs Radio June 7, 2013 w/ Space Rogue

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you by Trustwave's ...

Read More

Microsoft Advance Notification for June 2013

So far this year we has had two Patch Tuesday months with seven bulletins (January and March) and ...

Read More

ModSecurity Updates: Nginx Stable Release and Google Summer of Code Participation

Availability of ModSecurity 2.7.4: Nginx Stable Release The ModSecurity Development Team is pleased ...

Read More

The Speed is from the Devil – Some Thoughts about Google’s New Disclosure Policy

If you follow info-security news, you might have heard about Google considering a change in its ...

Read More

Alina: Following The Shadow Part 2

This will likely be the final blog post in this series on the Alina Point of Sale (POS) malware ...

Read More

SpiderLabs Radio May 31, 2013 w/ Space Rogue

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you by Trustwave's ...

Read More

Under The Hood: Linksys Remote Command Injection Vulnerabilities

Several models in the Linksys E-Series WiFi routers running their respective current firmwares are ...

Read More

ModSecurity Performance Recommendations

Sometimes we see ModSecurity users asking about performance in the mail-list. During this post I ...

Read More

SpiderLabs Radio May 24, 2013 w/ Space Rogue

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you by Trustwave's ...

Read More

Machine Learning Update 1

It has been almost exactly a month since my last post regarding the new project I am working on, so ...

Read More

SpiderLabs Radio May 17, 2013 w/ Space Rogue

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you by Trustwave's ...

Read More

Analysis of Malicious Document Files Spammed by Cutwail

In our Global Security Report, we highlighted a zero day vulnerability in the Windows Common ...

Read More

TWSL2013-002: Multiple XSS Vulnerabilities in The Bug Genie

Trustwave SpiderLabs has published a new security advisory for multiple Cross-Site Scripting (XSS) ...

Read More

Microsoft Patch Tuesday, May 2013

I keep hoping for an easy relaxing Patch Tuesday of say, only two or three bulletins but so far ...

Read More

Securing Continuous Integration Services (old)

Summary

Read More

Securing Continuous Integration Services

Summary

Read More

SpiderLabs Radio May 10, 2013 w/ Space Rogue

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you by Trustwave's ...

Read More

Introducing the Burp Notes Extension

As a Security Analyst I spend a significant amount of time working in tools like Burp Suite. On any ...

Read More

5 ways to protect your E-Commerce site

The Trustwave Spiderlabs team frequently responds to E-commerce data breaches. The number of ...

Read More

Microsoft Advance Notification for May 2013

There will be ten bulletins released by Microsoft next Tuesday and one of those should be for the ...

Read More

Alina: Casting a Shadow on POS

Over the pastfew months, a number of malware families targeting Point of Sale (POS) systems have ...

Read More

Mayday! 0-Day

While many workers around the world were celebrating the May 1st events, the US Department of Labor ...

Read More

SpiderLabs Radio May 3, 2013 w/ Space Rogue

This week's episode of SpiderLabs Radio hosted by Space Rogue covers Living Social, Reputation.com, ...

Read More