2023

CERT-UA Warns of SmokeLoader and RoarBAT Malware Attacks Against Ukraine 08/05/2023 at 13:56 By An ongoing phishing campaign with invoice-themed lures is being used to distribute the SmokeLoader malware in the form of a polyglot file, according to the Computer Emergency Response Team of Ukraine (CERT-UA). The emails, per the agency, are sent using compromised accounts […]

React to this headline:

Using Co-Managed SOC to Derive Maximum Value from a SIEM Investment 07/05/2023 at 18:25 By Security information and event management (SIEM) systems are crucial to cyber security, providing a solution for collecting and analyzing alerts from all manner of security tools, network infrastructure, and applications. This article is an excerpt from Trustwave Blog View Original

React to this headline:

Trustwave Answers 11 Important Questions on ChatGPT 07/05/2023 at 18:25 By ChatGPT can arguably be called the breakout software introduction of the last 12 months, generating both amazement at its potential and concerns that threat actors will weaponize and use it as an attack platform. This article is an excerpt from Trustwave Blog View Original

React to this headline:

MDR Can Bring Value to Your Endpoint Detection and Response Platform 07/05/2023 at 18:25 By Endpoint detection and response (EDR) solutions are a crucial element of any cyber defense strategy. This article is an excerpt from Trustwave Blog View Original Source React to this headline:

React to this headline:

Trustwave Briefs Federal Officials on Cybersecurity Trends and Discoveries 07/05/2023 at 18:25 By Karl Sigler, Senior Security Research Manager, SpiderLabs Threat Intelligence, conducted a series of briefings in Washington, D.C., to federal officials on April 12-13, giving an update on what Trustwave SpiderLabs researchers are finding with the Russia-Ukraine War, ChatGPT, and current phishing trends.

React to this headline:

Trustwave MDR and Penetration Testing Solutions Win Global InfoSec Awards 07/05/2023 at 18:25 By Trustwave was honored during Cyber Defense Magazine in the 11th Annual Global InfoSec Awards at the 2023 RSA Conference, taking home accolades for Managed Detection and Response (MDR) Service Providers and was named the Market Leader in Penetration Testing. This article

React to this headline:

Why It’s Important to Change Default Credentials 07/05/2023 at 18:24 By Security best practice guidelines always call for changing default passwords as any password left on the factory preset is considered low hanging fruit, essentially just waiting to be abused by attackers to gain unauthorized access. This article is an excerpt from SpiderLabs Blog from

React to this headline:

Dissecting Buffer Overflow Attacks in MongoDB 07/05/2023 at 18:24 By Towards the end of 2020, a new vulnerability in MongoDB was found and published. The vulnerability affected almost all versions of MongoDB, up to v4.5.0, but was discussed and patched appropriately. This article is an excerpt from SpiderLabs Blog from Trustwave View Original Source React

React to this headline:

CVE-2023-29383: Abusing Linux chfn to Misrepresent /etc/passwd 07/05/2023 at 18:24 By Two years ago, I picked out chfn as a candidate to be reviewed for security bugs. Why chfn I hear you ask? (Thanks for asking.) It is one of a small number of Set owner User ID (SUID) programs loaded with Linux which means

React to this headline: