Trustwave achieves verified MXDR solution and FastTrack ready partner status from Microsoft. Learn More

Trustwave achieves verified MXDR solution and FastTrack ready partner status from Microsoft. Learn More

Managed Detection & Response

Eradicate cyberthreats with world-class intel and expertise

Managed Security Services

Expand your team’s capabilities and strengthen your security posture

Consulting & Professional Services

Tap into our global team of tenured cybersecurity specialists

Penetration Testing

Subscription- or project-based testing, delivered by global experts

Database Security

Get ahead of database risk, protect data and exceed compliance requirements

Email Security & Management

Catch email threats others miss with layered security & maximum control

Co-Managed SOC (SIEM)

Eliminate alert fatigue, focus your SecOps team, stop threats fast, and reduce cyber risk

Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
The Trustwave Approach
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Platform
SpiderLabs Fusion Center
Security Operations Centers
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats

Adobe Flash Player 0-Day (CVE-2018-5002)

An Adobe advisory regarding a zero-day vulnerability in Adobe Flash Player was published late last week. In this advisory, Adobe states that it is aware of "limited, targeted attacks" exploiting the vulnerability with the attack vector being an office document, delivered via email, which executes the malicious Flash content.
For more technical details please visit this link.

We can confirm and reassure our customers that this attack is blocked by Trustwave Secure Web Gateway's generic detection logic, meaning no product updates are required in order to be protected. the attack will be blocked by the following policy rule: "Block Malicious Content (Malware Entrapment Engine)", so please be sure to have this rule enabled in your policy.

Regardless, additional detection logic to protect against this vulnerability specifically is in the works.