Trustwave SpiderLabs Uncovers Critical Cybersecurity Vulnerabilities Exposing Manufacturers to Costly Attacks. Learn More

Trustwave SpiderLabs Uncovers Critical Cybersecurity Vulnerabilities Exposing Manufacturers to Costly Attacks. Learn More

Services
Capture
Managed Detection & Response

Eradicate cyberthreats with world-class intel and expertise

twi-cloud-lock-color-svg
Managed Security Services

Expand your team’s capabilities and strengthen your security posture

twi-briefcase-color-svg
Consulting & Professional Services

Tap into our global team of tenured cybersecurity specialists

twi-dashboard-color-svg
Penetration Testing

Subscription- or project-based testing, delivered by global experts

twi-database-color-svg
Database Security

Get ahead of database risk, protect data and exceed compliance requirements

twi-email-color-svg
Email Security & Management

Catch email threats others miss with layered security & maximum control

twi-managed-portal-color
Co-Managed SOC (SIEM)

Eliminate alert fatigue, focus your SecOps team, stop threats fast, and reduce cyber risk

Solutions
BY TOPIC
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
The Trustwave Approach
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Platform
SpiderLabs Fusion Center
Security Operations Centers
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats

Database Security Knowledgebase Update 6.30

New Checks - DynamoDB

  • List global tables
    Description
    : Reports all DynamoDB global tables and their metadata
            Risk
    : Informational

  • Admin User verification
    Description
    : Reports user with full DynamoDB access is whether an AWS admin or not
            Risk
    : Low

  • verify VPC endpoint
    Description
    : Verify VPC Endpoint for DynamoDB exists.
            Risk
    : Medium

  • Verify Https Network ACL
    Description
    : Verify if inbound Https Network ACLs exist in current AWS region.
            Risk
    : Medium

  • Data at rest encryption Is not enabled
    Description
    : Verify KMS key used to encrypt data at rest is enabled.
            Risk
    : Medium

  • Global Table Version
    Description
    : Reports the version of global DynamoDB tables
            Risk
    : Informational

  • Credential Verification
    Description
    :
            Risk
    : Informational

Availability

  • Available to all AppDetectivePRO and DbProtect customers with maintenance (subscription or perpetual) in good standing at no additional cost.
  • Download SHATTER Knowledgebase from the Trustwave Support Portal. (https://www.trustwave.com/company/support/ and select AppDetectivePRO or DbProtect)
  • AppDetectivePRO customers can use the Updater within the product as well

Latest Software Updates

Announcing ModSecurity version 3.0.11

We are announcing the release of ModSecurity version 3.0.11 (libModSecurity). This version includes expirevar support as a new feature, and a mixture of enhancements and bug fixes.

Read More

Web Application Security – ModSecurity Commercial Rules, Update for November 2023

Overview for rules released by Trustwave SpiderLabs in November for ModSecurity Commercial Rules package. The rules are available for versions 2.9.x and 3.x of ModSecurity.

Read More

Database Security Knowledgebase Update 6.38

Trustwave Database Security Knowledgebase (ShatterKB) 6.38 is now available. It introduces new checks for Oracle, Cassandra, MySQL and Microsoft Azure SQL Database.

Read More