Hunting For Integer Overflows In Web Servers
Allow me to set the scene and start proceedings off with a definition of an integer overflow, ...
Read More
Welcome to Adventures in Cybersecurity: The Defender Series
I’m happy to say I’m done chasing Microsoft certifications (AZ104/AZ500/SC100), and as a result, ...
Read MoreTrustwave SpiderLabs: Insights and Solutions to Defend Educational Institutions Against Cyber Threats
Security teams responsible for defending educational institutions at higher education and primary ...
Read MoreBreakdown of Tycoon Phishing-as-a-Service System
Just weeks after Trustwave SpiderLabs reported on the Greatness phishing-as-a-service (PaaS) ...
Read MoreTrustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising
During an Advanced Continual Threat Hunt (ACTH) investigation that took place in early December ...
Read MoreTrustwave SpiderLabs Guide: Jailbreaking Apple iOS 17 and Above
PLEASE NOTE: Jailbreaking any phone has the potential to permanently damage your device. Even if ...
Read MoreTrusted Domain, Hidden Danger: Deceptive URL Redirections in Email Phishing Attacks
In this ever-evolving landscape of cyberthreats, email has become a prime target for phishing ...
Read MoreSpoofing 802.11 Wireless Beacon Management Frames with Manipulated Power Values Resulting in Denial of Service for Wireless Clients
This is another one of those blog posts from me about how I independently carried out some security ...
Read MoreTrustwave SpiderLabs Detects Spike in Greatness Phishing Kit Attacks on Microsoft 365 Users
Trustwave SpiderLabs is tracking a spike in usage of the Greatness phishing kit to attack Microsoft ...
Read MoreApache ActiveMQ Vulnerability Leads to Stealthy Godzilla Webshell
Trustwave has observed a surge in attacks exploiting vulnerabilities in Apache ActiveMQ hosts. In ...
Read MoreBeyond the Facade: Unraveling URL Redirection in Google Services
In the murky waters of cyber threats, one tactic has steadily gained wide adoption: URL redirection ...
Read MoreTypes of Social Engineering Attacks used to Gain Internal Network Access
Social engineering is a technique commonly used by adversaries to manipulate individuals or groups ...
Read More(Response) Splitting Up Reverse Proxies To Reach Internal Only Paths
When I’m carrying out security research into a thing, I generally don’t like to Google prior ...
Read MoreTrustwave Transfers ModSecurity Custodianship to the Open Worldwide Application Security Project (OWASP)
After serving as its steward for over a decade, Trustwave has agreed to transfer the reins of the ...
Read MoreCVE-2023-50916: Authentication Coercion Vulnerability in Kyocera Device Manager
Overview of Authentication Coercion Vulnerability
Read MoreFueling Chaos: Hacker Group Grinds 70% of Iran's Gasoline System to a Halt
The Iranian government has made the claim that a cyber threat group, identified as Gonjeshke ...
Read MoreTop 10 SpiderLabs Blog Posts of 2023
The Top 10 Trustwave SpiderLabs’ blogs in 2023 reflected the cybersecurity landscape impacting ...
Read MoreHunting for Android Privilege Escalation with a 32 Line Fuzzer
Trustwave SpiderLabs tested a couple of Android OS-based mobile devices to conduct the research on ...
Read MoreSurfing the Tidal Waves of HR-Themed Spam Emails
Threat actors constantly improve their tactics and are always on the hunt for technical or social ...
Read MoreInstagram Phishing Targets Backup Codes
Recently, we noticed another strain of Instagram “Copyright Infringement” phishing emails in our ...
Read MoreHoneypot Recon: MySQL Malware Infection via User-Defined Functions (UDF)
In the vast world of cybersecurity, as technologies evolve, so do the methods attackers employ to ...
Read MoreTrustwave SpiderLabs Report: LockBit 3.0 Ransomware Vs. the Manufacturing Sector
As the manufacturing sector continues its digital transformation, Operational Technology (OT), ...
Read MoreOverview of the Cyberwarfare used in Israel – Hamas War
On October 7, 2023, the Palestinian organization Hamas launched the biggest attack on Israel in ...
Read MoreThe 2023 Retail Services Sector Threat Landscape: A Trustwave Threat Intelligence Briefing
The annual holiday shopping season is poised for a surge in spending, a fact well-known to ...
Read MorePwning Electroencephalogram (EEG) Medical Devices by Default
Overall Analysis of Vulnerability Identification – Default Credentials Leading to Remote Code ...
Read MoreHidden Data Exfiltration Using Time, Literally
I was looking at my watch last week and my attention was moved towards the seconds over at the ...
Read MoreUnveiling the CAPTCHA Escape: The Dance of CAPTCHA Evasion Using TOR
In this era, threat actors have proven to be tireless in their pursuit of exploiting ...
Read MoreHTTP/2 Rapid Reset
A recent vulnerability tracked as Rapid Reset (CVE-2023-44487) in the HTTP/2 protocol was recently ...
Read More