Collaborate Disseminate
Recently SAP released a patch for an Adaptive Server Enterprise vulnerability that allows legitimate database users to create files on disk where the server process can write to. This is useful when doing a chained database attack – first create…
Continue reading SAP ASE file creation vulnerability (CVE-2016-6196)
Recently SAP released a patch for an Adaptive Server Enterprise vulnerability that allows legitimate database users to create files on disk where the server process can write to. This is useful when doing a chained database attack – first create…
Continue reading SAP ASE file creation vulnerability (CVE-2016-6196)
From Anonymous style SYN flooding to Application layer denial of service, denial of service is a subject that has been often confused with hacking by the grand public. While your data might not be stolen, the impact both on sales…
Continue reading Denial of Service: A Survival Guide
Introduction The term “hash” is thrown around in casual IT conversation quite a bit nowadays, from “pass the hash” to “salted hashes” to “would you like hot sauce with your hash?” Certainly there are many useful things that one can…
Continue reading Slinging Hash: Speeding Cyber Threat Hunting Methodologies via Hash-Based Searching
From Anonymous style SYN flooding to Application layer denial of service, denial of service is a subject that has been often confused with hacking by the grand public. While your data might not be stolen, the impact both on sales…
Continue reading Denial of Service: A Survival Guide
From Anonymous style SYN flooding to Application layer denial of service, denial of service is a subject that has been often confused with hacking by the grand public. While your data might not be stolen, the impact both on sales…
Continue reading Denial of Service: A Survival Guide
Introduction The term “hash” is thrown around in casual IT conversation quite a bit nowadays, from “pass the hash” to “salted hashes” to “would you like hot sauce with your hash?” Certainly there are many useful things that one can…
Continue reading Slinging Hash: Speeding Cyber Threat Hunting Methodologies via Hash-Based Searching
Introduction The term “hash” is thrown around in casual IT conversation quite a bit nowadays, from “pass the hash” to “salted hashes” to “would you like hot sauce with your hash?” Certainly there are many useful things that one can…
Continue reading Slinging Hash: Speeding Cyber Threat Hunting Methodologies via Hash-Based Searching
Summary The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Enjoy! New Vulnerability Test Highlights Some of the mor… Continue reading TrustKeeper Scan Engine Update for July 20, 2016
Summary The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Enjoy! New Vulnerability Test Highlights Some of the mor… Continue reading TrustKeeper Scan Engine Update for July 20, 2016