Trustwave SpiderLabs Uncovers Critical Cybersecurity Vulnerabilities Exposing Manufacturers to Costly Attacks. Learn More

Request a Demo

Trustwave SpiderLabs Uncovers Critical Cybersecurity Vulnerabilities Exposing Manufacturers to Costly Attacks. Learn More

Request a Demo
Services
Capture
Managed Detection & Response

Eradicate cyberthreats with world-class intel and expertise

twi-cloud-lock-color-svg
Managed Security Services

Expand your team’s capabilities and strengthen your security posture

twi-briefcase-color-svg
Consulting & Professional Services

Tap into our global team of tenured cybersecurity specialists

twi-dashboard-color-svg
Penetration Testing

Subscription- or project-based testing, delivered by global experts

twi-database-color-svg
Database Security

Get ahead of database risk, protect data and exceed compliance requirements

twi-email-color-svg
Email Security & Management

Catch email threats others miss with layered security & maximum control

twi-managed-portal-color
Co-Managed SOC (SIEM)

Eliminate alert fatigue, focus your SecOps team, stop threats fast, and reduce cyber risk

View All Trustwave Services
Solutions
BY INDUSTRY
BY REGULATION
BY TOPIC
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
The Trustwave Approach
A focus on threat detection and response
Awards and Accolades
Recognition by analysts and media outlets
Trustwave SpiderLabs Team
Researchers, ethical hackers and responders
Trustwave Fusion Platform
Unprecedented security visibility and control
SpiderLabs Fusion Center
Our cybersecurity command center
Security Operations Centers
Distributed worldwide defense nodes
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
Register
Login
Resources
BLOGS
UPCOMING
MEDIA & ASSETS
NOTICES
HELP
Database Security

Database Security Knowledgebase Update 6.30

May 02, 2023

New Checks - DynamoDB

  • List global tables
    Description    : Reports all DynamoDB global tables and their metadata
            Risk    : Informational

  • Admin User verification
    Description    : Reports user with full DynamoDB access is whether an AWS admin or not
            Risk    : Low

  • verify VPC endpoint
    Description    : Verify VPC Endpoint for DynamoDB exists.
            Risk    : Medium

  • Verify Https Network ACL
    Description    : Verify if inbound Https Network ACLs exist in current AWS region.
            Risk    : Medium

  • Data at rest encryption Is not enabled
    Description    : Verify KMS key used to encrypt data at rest is enabled.
            Risk    : Medium

  • Global Table Version
    Description    : Reports the version of global DynamoDB tables
            Risk    : Informational

  • Credential Verification
    Description    :
            Risk    : Informational

Availability

  • Available to all AppDetectivePRO and DbProtect customers with maintenance (subscription or perpetual) in good standing at no additional cost.
  • Download SHATTER Knowledgebase from the Trustwave Support Portal. (https://www.trustwave.com/company/support/ and select AppDetectivePRO or DbProtect)
  • AppDetectivePRO customers can use the Updater within the product as well

Latest Software Updates

Announcing ModSecurity version 3.0.11

We are announcing the release of ModSecurity version 3.0.11 (libModSecurity). This version includes expirevar support as a new feature, and a mixture of enhancements and bug fixes.

Read More

Web Application Security – ModSecurity Commercial Rules, Update for November 2023

Overview for rules released by Trustwave SpiderLabs in November for ModSecurity Commercial Rules package. The rules are available for versions 2.9.x and 3.x of ModSecurity.

Read More

Database Security Knowledgebase Update 6.38

Trustwave Database Security Knowledgebase (ShatterKB) 6.38 is now available. It introduces new checks for Oracle, Cassandra, MySQL and Microsoft Azure SQL Database.

Read More