Exploring an Experimental Windows Kernel Rootkit in Rust
Around two years ago, memN0ps took the initiative to create one of the first publicly available ...
Read More
Stay Informed
Sign up to receive the latest security news and trends straight to your inbox from Trustwave.
Hypervisor Development in Rust for Security Researchers (Part 1)
In the ever-evolving field of information security, curiosity and continuous learning drive ...
Read MoreYour Money or Your Data: Ransomware Readiness Planning
Today’s blog installment brings us to the end of our 30-week journey that covered 30 cybersecurity ...
Read MoreExposed and Encrypted: Inside a Mallox Ransomware Attack
Recently, a client enlisted the support of Trustwave to investigate an unauthorized access incident ...
Read MoreThe Willy Wonka World of Application Security Defenses
One doesn’t have to be a magician to understand how to track the hundreds, if not thousands, of ...
Read MoreThe Bug Stops Here: Using DevSecOps Workflows for Pest-Free Applications
Developers and cybersecurity have an interesting relationship. Developers have no problem with ...
Read MoreDeep Dive and Simulation of a MariaDB RCE Attack: CVE-2021-27928
In early 2021, a new vulnerability, identified as CVE-2021-27928, was discovered and published. It ...
Read MoreTrustwave Rapid Response: Mitigate Windows TCP/IP RCE Vulnerability (CVE-2024-38063)
Microsoft has disclosed a critical (CVSS 9.8) TCP/IP remote code execution (RCE) vulnerability that ...
Read MoreThe Art of Deception: Turning the Tables on Attackers with Active Defenses
Once an attacker enters your network, one of their first actions will be to try and hide their ...
Read MoreSentinels of Ex Machina: Defending AI Architectures
The introduction, adoption, and quick evolution of generative AI has raised multiple questions ...
Read MoreSYS01 Infostealer and Rilide Malware Likely Developed by the Same Threat Actor
Drawing on extensive proprietary research, Trustwave SpiderLabs believes the threat actors behind ...
Read MoreMultiple Cross-Site Scripting (XSS) Vulnerabilities in REDCap (CVE-2024-37394, CVE-2024-37395, and CVE-2024-37396)
Trustwave SpiderLabs uncovered multiple stored cross-site scripting (XSS) vulnerabilities ...
Read MoreKnowing your Enemy: Situational Awareness in Cyber Defenses
Most homeowners know that a lock is a good idea as a basic defense against invaders, and leaving ...
Read MoreCloudy with a Chance of Hackers: Protecting Critical Cloud Workloads
If you've been following along with David's posts, you'll have noticed a structure to the topics: ...
Read MoreTrustwave Rapid Response: CrowdStrike Falcon Outage Update
Trustwave is proactively assessing and monitoring our clients who may have been impacted by ...
Read MoreUsing AWS Secrets Manager and Lambda Function to Store, Rotate and Secure Keys
When working with Amazon Web Services (AWS), we often find that various AWS services need to store ...
Read MoreFacebook Malvertising Epidemic – Unraveling a Persistent Threat: SYS01
The Trustwave SpiderLabs Threat Intelligence team's ongoing study into how threat actors use ...
Read MoreTips for Optimizing Your Security Operations Framework
Building an effective Security Operations framework that provides the right balance of people, ...
Read MoreNetwork Isolation for DynamoDB with VPC Endpoint
DynamoDB is a fully managed NoSQL database service offered by Amazon Web Services (AWS). It is ...
Read MoreThe Underdog of Cybersecurity: Uncovering Hidden Value in Threat Intelligence
Threat Intelligence, or just TI, is sometimes criticized for possibly being inaccurate or outdated. ...
Read MoreClockwork Blue: Automating Security Defenses with SOAR and AI
It’s impractical to operate security operations alone, using manual human processes. Finding ...
Read MoreProfessional Services Sector Under Attack - Trustwave SpiderLabs Report 2024
Recent research by Trustwave SpiderLabs, detailed in their newly published report "2024 ...
Read MoreAtlas Oil: The Consequences of a Ransomware Attack
Overview Atlas Oil, a major player in the oil and fuel distribution industry, fell victim to a ...
Read MoreScanning the Matrix: SIEM Best Practices
(A thought from The Matrix: Neo likely used a SIEM before he took the red pill and could see the ...
Read MoreFare Thee Well ModSecurity: End-of-Life and Last Commercial Rules Update for June 2024
A Fourteen-Year Journey Comes to an End In June 2010, Trustwave acquired Breach Security, which ...
Read MoreSecure Access Service Edge: Another Multi-Tool for the SOC
Over the years, several security defense architectures have merged into a single solution. Endpoint ...
Read MoreSearch & Spoof: Abuse of Windows Search to Redirect to Malware
Trustwave SpiderLabs has detected a sophisticated malware campaign that leverages the Windows ...
Read More