Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

Database Security

Prevent unauthorized access and exceed compliance requirements.

Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
SpiderLabs Blog

SpiderLabs Threat Intelligence Program

So a lot of people have been asking me "What do you do at Trustwave?" and I tell them I am the Threat Intelligence Manager. People usually start to smile like that's some kind of joke, like I manage intelligence or something and then they realize I am serious and they get this puzzled look on their face because they don't really know what Threat Intelligence really is. Well now I can point people to this Trustwave press release that came out today.

The release actually announces three things. First the Trustwave Managed Web Application Firewall. You might think big deal, Yet Another WAF but this isn't just a static WAF, events are sent to the Trustwave SOC (Security Operations Centers) where real people will actually look at the events to generate alerts. That should cut way down on the false positive rate. The release also announces the Managed SIEM Appliance, which like the WAF uses real people at the Trustwave SOC to identify and mitigate security threats.

And the last thing on the release (but definitely not last to me) is the SpiderLabs Threat Intelligence Program. This is where I come in. Again Trustwave has decided to use real people, and not some automated script to aggregate information and copy and paste it into reports, to disseminate valuable information that will help you make better security decisions. If you know my background you know I have been doing exactly this for a very long time, but now I have access to cutting edge research done by the SpiderLabs team, sort of an inside view of what exactly is going on out there. Take the access to that research combined with numerous other information sources that have been cultivated over the years, apply some unique insight and analysis and you have the SpiderLabs Threat Intelligence Program.

I am very excited about the whole program. It will be delivered as a daily feed as well as quarterly summaries. This will really give organizations a heads up on evolving threats without having to spend their days reading a hundred blogs, following a thousand twitters, or trying to research everything all at once and still missing half of what is going on out there. Security professionals have enough to do without trying to stay abreast of the constantly changing landscape. That's what SpiderLabs does anyway, lets us do it.

So hopefully now when people ask me what I do and I say Threat Intelligence Manager I won't get that joking smile or that puzzled look.

Latest SpiderLabs Blogs

Welcome to Adventures in Cybersecurity: The Defender Series

I’m happy to say I’m done chasing Microsoft certifications (AZ104/AZ500/SC100), and as a result, I’ve had the time to put some effort into a blog series that hopefully will entertain and inform you...

Read More

Trustwave SpiderLabs: Insights and Solutions to Defend Educational Institutions Against Cyber Threats

Security teams responsible for defending educational institutions at higher education and primary school levels often find themselves facing harsh lessons from threat actors who exploit the numerous...

Read More

Breakdown of Tycoon Phishing-as-a-Service System

Just weeks after Trustwave SpiderLabs reported on the Greatness phishing-as-a-service (PaaS) framework, SpiderLabs’ Email Security team is tracking another PaaS called Tycoon Group.

Read More