ModSecurity v3: DoS Vulnerability in Four Transformations (CVE-2023-38285)
ModSecurity is an open-source Web Application Firewall (WAF) engine maintained by Trustwave. This ...
Read MoreModSecurity is an open-source Web Application Firewall (WAF) engine maintained by Trustwave. This ...
Read MoreIn their latest report titled "Cybersecurity in the Healthcare Industry: Actionable Intelligence ...
Read MoreAs they say, when it rains, it pours. Recently, we observed more than 3,000 phishing emails ...
Read MoreTo obtain a better perspective of attacks worldwide, Trustwave has implemented a network of ...
Read MoreIntroduction In a constantly connected world, protecting sensitive data in what are often complex ...
Read MoreRecently, I discovered two vulnerabilities in the ButterflyMX system which were responsibly ...
Read MoreIn a recent development, Russian hackers have declared their intention to launch cyberattacks on ...
Read MoreIn today's digital era, the importance of securing databases cannot be overstated. As more and more ...
Read MoreOn May 19, 2023, Barracuda Networks identified a remote command injection vulnerability ...
Read MoreI've been pentesting applications for nearly two decades now and throughout that time you get to ...
Read MoreUpdate - June 16, 2023: The second vulnerability mentioned in the June 12 update now has an ...
Read MoreAs is tradition with my blog posts, let’s start off a definition of what HTTP pipelining is all ...
Read MoreInformation disclosed in the leaked NTC Vulkan papers allows us to investigate the high probability ...
Read MoreOver the past few days, we have seen phishing attacks that use a combination of compromised ...
Read MoreFor those wondering what GraphQL is…
Read MoreA user impersonation feature typically allows a privileged user, such as an administrator, but ...
Read MoreI feel I need to clarify, for legal reasons, that this is nothing to do with any Harry Potter game. ...
Read MoreIgnoring the little stuff is never a good idea. Anyone who has pretended that the small noise their ...
Read MoreSecurity best practice guidelines always call for changing default passwords as any password left ...
Read MoreTowards the end of 2020, a new vulnerability in MongoDB was found and published. The vulnerability ...
Read MoreA little bit of background for those not familiar with chfn…
Read MoreIn early March, one of the notorious botnets, Emotet, resumed its spamming activities after a ...
Read MoreTrustwave SpiderLabs uncovered a new strain of malware that it dubbed Rilide, which targets ...
Read MoreOverview On March 29, a massive supply chain compromise in 3CX software resulted in malware being ...
Read MoreThe Trustwave SpiderLabs research team has been tracking a new threat group calling itself ...
Read MoreTax season is a busy time of year for taxpayers and threat actors. Consumers and businesses focus ...
Read MoreSince it was first released to the public late last year, ChatGPT has successfully captured the ...
Read More