Typosquatting in Python Repositories

December 13, 2019 | Radoslaw Zdonczyk

Python's popularity is amazing and constantly growing. For the first time, ...

Patch Tuesday, December 2019

December 10, 2019 | Karl Sigler

December's Patch Tuesday is upon us, and, as in years gone by, it's a rather ...

SCshell: Fileless Lateral Movement Using Service Manager

December 09, 2019 | Charles Hamilton

During red team engagements, lateral movement in a network is crucial. In ...

CVE-2019-1429: (Another) Microsoft Internet Explorer 0-Day

December 05, 2019 | SpiderLabs Researcher

November’s Patch Tuesday from Microsoft included a patch for yet another ...

Introducing Password Cracking Manager: CrackQ

December 04, 2019 | Daniel Turner

Today we are releasing CrackQ, a queuing system to manage password cracking ...

Time Windows for Penetration Testing

November 22, 2019 | Albert Campa

Often when penetration tests are scheduled, it will be requested that testing ...

CVE-2019-15652: SatLink VSAT Vulnerabilities

November 21, 2019 | Robert Foggia

Back in May of this year, I discovered a few vulnerabilities in the SatLink ...

Fake Windows Update Spam Leads to Cyborg Ransomware and Its Builder

November 19, 2019 | Diana Lopera

Recently, fake Microsoft Windows Update emails were spammed with the following ...

Windows Debugging & Exploiting Part 2 - WinDBG 101

November 18, 2019 | Bruno Oliveira

Introduction Hello again! After our previous post about the environment setup, ...

Fingerprinting FreeBSD OS Versions using OpenSSH

November 14, 2019 | Manuel Nader

In the past, we’ve described how to fingerprint Ubuntu OS Version using ...

A Call for Cooler Heads

November 08, 2019 | Trustwave SpiderLabs

One of the unfortunate parts of a business like ours is when disputes arise ...

Double Loaded Zip File Delivers Nanocore

November 05, 2019 | Diana Lopera

Most malware sent via emails is packaged in archives such as ZIP, RAR, and 7z ...

Windows Debugging & Exploiting Part 1 - Environment Setup

October 23, 2019 | Bruno Oliveira

Introduction In this blog series, I will try to set some base knowledge for ...

Messing with Azorult Part 2: Command and Control

October 18, 2019 | Rodel Mendrez

As we mentioned in our earlier blog, Azorult is very popular in the underground ...

Messing with Azorult Part 1: Malware Breakdown

October 15, 2019 | Rodel Mendrez

In this blog series, we dive into an information stealing Trojan called Azorult ...

Patch Tuesday, October 2019

October 08, 2019 | Karl Sigler

Microsoft’s security update for the month of October is one of the lightest ...

Chaining Low/Info Level Vulnerabilities for Pwnage

September 30, 2019 | Liam Somerville

Chained Critical Everyone gets critical. It’s part of our vernacular: ...

Documents with IRM Password Protection Lead to Remcos RAT

September 27, 2019 | Diana Lopera

Documents attached to emails are commonly used as the initial vector to deliver ...

Digital Canaries in a Coal Mine: Detecting Enumeration with DNS and AD

September 26, 2019 | Stephan Borosh

Introduction A fundamental part of any network is the Domain Name Service ...

Tracking the Chameleon Spam Campaign

September 25, 2019 | Dr. Fahim Abbasi

In this blog, we draw attention to a persistent high-volume spam campaign that ...

Microsoft Internet Explorer Remote Code Execution 0-Day (CVE-2019-1367)

September 24, 2019 | SpiderLabs Researcher

Microsoft released an out-of-band patch for a 0-day vulnerability in Internet ...

Getting Started With Azure DevOps

September 18, 2019 | Stephan Borosh

Recently, I set out to find a simple solution to manage the building of all my ...

Patch Tuesday, September 2019

September 11, 2019 | Karl Sigler

For September 2019, Microsoft is releasing 78 CVEs. Of these CVEs, 17 are rated ...

Multiple Vulnerabilities in Comba and D-Link Routers

September 10, 2019 | Karl Sigler

Overview There are five new credential leaking vulnerabilities discovered and ...

Lord EK: A New Exploit Kit with an Ambitious Name

September 06, 2019 | Nikita Kazymirskyi

After a bit of a lull in the world of exploit kits, a new exploit kit by the ...

Digging Deep into Magecart Malware Part II

September 04, 2019 | Rodel Mendrez

Magecart is the name given to notorious groups of hackers that target online ...

Patch Tuesday, August 2019

August 13, 2019 | Karl Sigler

The August Patch Tuesday is here ringing in patches for a massive 97 CVEs. ...

Trustwave Wins the Threat Indicator Top Contributor Award from Microsoft

August 12, 2019 | Ziv Mador

Over the years, cyber-attacks have become widespread and increasingly ...