Collaborate Disseminate
A few weeks ago, FoxGlove Security released this important blog post that includes several Proof-of-Concepts for exploiting Java unserialize vulnerabilities. A remote attacker can gain Remote Code Execution by sending specially crafted payload to any e… Continue reading Protecting Your Sites from Apache.Commons Vulnerabilities
A recent new 0-day in Joomla discovered by Sucuri (Sucuri Blog) has drawn a lot of attention from the Joomla community, as well as attackers. Using knowledge gained from our recent research on Joomla (CVE-2015-7857, SpiderLabs Blog Post) and informatio… Continue reading Joomla 0-Day Exploited In the Wild (CVE-2015-8562)
Summary The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Enjoy! New Vulnerability Test Highlights Some of the mor… Continue reading TrustKeeper Scan Engine Update for December 16, 2015
Have you ever wondered if all that informal training you do with your friends & family is paying off? When you say things like “use trusted sites” or “don’t give your password to anyone” you wonder if they’ll remember those…
Continue reading Mom Spies a Hack
Summary The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Enjoy! New Vulnerability Test Highlights Some of the mor… Continue reading TrustKeeper Scan Engine Update for December 09, 2015
The December Microsoft Path Tuesday is upon us and it does not bring any happy tidings. It brings with it twelve bulletins with seven rated Critical and five rated Important. Across the board there are 58 individual CVEs, one of…
Continue reading Microsoft Patch Tuesday, December 2015
This month’s update for our AppDetectivePRO and DbProtect Knowledgebase is now available. Knowledgebase version 4.56 includes new check for MS Azure SQL, new policy for Oracle, and updated checks for Oracle, MS SQL, and SAP (Sybase) Adaptive Server Ent… Continue reading AppDetectivePRO and DbProtect Knowledgebase Update 4.56
Introduction FrameworkPoS is a well-documented family of malware that targets Point of Sale (PoS) systems and has been attributed to at least one high profile retail breach. The malware author(s) have continued to improve upon the original malware, rel… Continue reading Another Brick in the FrameworkPoS
We’ve just released a new version (4.39) of Corsigs for users of Trustwave Web Application Firewall (WAF) version 7.0. These new rules help protect customer applications against malicious traffic targeting the vulnerabilities listed below. Release Summ… Continue reading Trustwave Web Application Firewall Signature Update 4.39 Now Available
Summary The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Enjoy! New Vulnerability Test Highlights Some of the mor… Continue reading TrustKeeper Scan Engine Update for November 20, 2015