Showing 12 results for: January 2015 ×

SpiderLabs Radio for the Week of January 19, 2015

In this week's episode: Two Flash 0-Days Cause Confusion The trials of Ross Ulbricht and Barrett Brown Listen to this and archived episodes on Trustwave SpiderLabs Radio or in iTunes. Or you can download the MP3 file directly here. Or...

TrustKeeper Scan Engine Update – January 20, 2015

The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Highlights of the release include new checks for 20 vulnerabilities New Vulnerability Test Highlights AllegroSoft...

SpiderLabs Radio for the Week of January 12, 2015

In this week's episode we discuss Responsible Vulnerability Disclosure in the wake of Google's release of Microsoft zero days. Links mentioned in this podcast: Microsoft: A Call for Better Coordinated Vulnerability Disclosure Intro to HDMoore's Law The Speed is from...

Microsoft Patch Tuesday, January 2015

Happy New Year and welcome to the first Microsoft Patch Tuesday of 2015. This year's January release is twice the size last year's with eight bulletins total. One is rated "Critical" and the other seven are marked "Important". The month's...

SpiderLabs Radio for the Week of January 5, 2015

In this week's episode: Welcome back and Happy 2015! The Return of the Malicious Macro New Apple Exploits: iDict and Thunderstrike One Final Microsoft Zero Day for 2014 Links mentioned in this podcast: Deobfuscating Malicious Macros Using Python: http://blog.spiderlabs.com/2015/01/tips-for-deobfuscating-the-malicious-macros-using-python.html Trammell...

Deobfuscating Malicious Macros Using Python

Over the past few weeks, we've observed cybercriminals spamming users, particularly in the UK, using document files embedded with malicious macros masquerading as invoices. The attachment is either a Word or an Excel document file. Here are some examples incorporating...

AppDetectivePRO and DbProtect Knowledgebase Update 4.45

This month's update for our AppDetectivePRO and DbProtect Knowledgebase is now available. Knowledgebase version 4.45 includes new checks for vulnerabilities and configuration issues in Oracle, Microsoft SQL Server, MySQL and SAP (Sybase) ASE, and updated checks for IBM DB2 LUW,...