Collaborate Disseminate
A zero day Flash exploit caught targeting South Korean users was announced by South Korea’s CERT on January 31, 2018. The exploit was embedded in an Excel spreadsheet. Upon opening the spreadsheet the Flash file loads a second stage which…
Continue reading Flash Zero Day (CVE-2018-4878)
February’s Patch Tuesday is here and after the light January, it’s back with patches for 50 CVEs and two “roll up” advisories. Running down the CVEs, there are 14 rated “Critical”, 34 rated “Important” and 2 rated “Moderate”. Once again…
Continue reading Microsoft Patch Tuesday, February 2018
Last year I discovered multiple vulnerabilities in NETGEAR products. Now that these vulnerabilities have gone through the disclosure process and have been patched we can discuss the technical details. TWSL2018-002: Password Recovery and File Access on … Continue reading Multiple Vulnerabilities in NETGEAR Routers
While performing security research on personal storage I found some vulnerabilities in the WD (Western Digital) MyCloud device. Trustwave reported them to WD back in 2017 and now that patches are available we can discuss the technical details. The firs… Continue reading Multiple Vulnerabilities in WD MyCloud
Over the past few months there has been a lot going on with ModSecurity. There was libModSecurity (aka 3.0) release which was covered in details in a recent blog post by Lead Developer @zimmerle. There was also two recent presentations…
Continue reading ModSecurity – News and Commercial Rules Update
libModSecurity aka ModSecurity version 3.0 is out there. libModSecurity starts a new era in terms of ModSecurity extensibility. The modular architecture provides flexibility to extend ModSecurity core with scripting languages and from scripting languag… Continue reading ModSecurity Version 3.0 Announcement
Happy 2018 everyone! January’s Patch Tuesday will ease you into the new year with just 23 CVEs patched. Historically January has always been a light patch month. The release patches one CVE each that’s rated “Critical”, “Moderate” and “Low”. The…
Continue reading Microsoft Patch Tuesday, January 2018
Trustwave Spiderlabs is pleased to announce the release of CorSigs version 4.51 for Trustwave Web Application Firewall (WAF) versions 7.6, 8.0, 8.5 and 9.0. These rules are written to detect attacks or classes of attacks on web applications and their…
Continue reading Trustwave Web Application Firewall Signature Update 4.51 Now Available
You have probably heard the news of new vulnerabilities that affect most major chipsets, including Intel, Arm, and AMD. This means that the vulnerability affects nearly everyone who owns a computing device. What is the vulnerability? The vulnerability … Continue reading Overview of Meltdown and Spectre
You have probably heard the news of new vulnerabilities that affect most major chipsets, including Intel, Arm, and AMD. This means that the vulnerability affects nearly everyone who owns a computing device. What is the vulnerability? The vulnerability … Continue reading Overview of Meltdown and Spectre