Emerging Threats

Trustwave SpiderLabs: The Unique Factors that Make Professional Services a Target 2024-07-08 at 17:01 By Trustwave SpiderLabs has put together nine vertical threat reports over the past 12 months, but in its most recent effort, the 2024 Professional Services Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies report, our team of elite researchers delve into one […]

CDK Global Cyber Incident Shows the Need for Better Supply Chain Security 2024-06-27 at 16:01 By CDK Global, a company that provides software for thousands of auto dealers, was hit by back-to-back cyberattacks on June 19. These attacks led to an outage that continued to impact many of their sales operations on Friday, according to the

Ransomware, Supply Chain & Tech Threats Explode – 2024 Trustwave SpiderLabs Report 2024-06-26 at 16:01 By Trustwave SpiderLabs, in its just-released report 2024 Professional Services Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies, has uncovered an increasing number of ransomware, third-party supplier, and technology-based attacks targeting the professional services sector. This article is an

How Deepfakes May Impact Upcoming Elections Worldwide 2024-06-18 at 16:02 By Jose Luis Riveros The common fear regarding election interference is that a threat actor will gain access to either ballot machines or the networks that tally votes. However, there is a much easier method a person interested in interfering with a specific election can

How Trustwave Protects Your Databases in the Wake of Recent Healthcare Data Breaches 2024-06-11 at 18:01 By The recent cyberattack on Ascension Medical, Change Healthcare and several UK hospitals is a stark reminder of the vulnerabilities within the healthcare sector. This article is an excerpt from Trustwave Blog View Original Source

How Managed Detection and Response Helps Protect Against Threats from Cloud Sprawl 2024-06-10 at 16:16 By As businesses continue to rely on cloud services for all sorts of applications, computing, and storage services, each with its APIs, they dramatically increase their attack surface. It’s a situation that results in prime breeding grounds for cyber threats

911 S5 Botnet Operation Disruption Highlights the Need for MDR and Email Security 2024-06-03 at 16:02 By A major botnet operation that controlled an estimated 19 million IP addresses and was responsible for $99 million in illegal gains was shut down this week, and an international law enforcement operation arrested its primary operator. This article

8 Reasons to Conduct Regular Vulnerability Scans 2024-05-31 at 16:16 By Vulnerability scanning is a critical component of any robust Offensive Security strategy. When combined with penetration testing and Red Team exercises, they can serve as an early warning system to identify potential security weaknesses and provide an organization with the breathing room needed to implement changes before they are discovered

ChatGPT: A Tool for Attackers and Defenders 2024-05-30 at 21:01 By Jason Whyte ChatGPT impresses everyone with its writing capabilities; however, its proficiency in understanding and generating human-like text has inadvertently empowered threat actors to produce realistic and error-free phishing emails, which can be challenging to detect. This article is an excerpt from Trustwave Blog

Growing Attack Surfaces Highlight the Need for Managed Detection and Response Services 2024-05-28 at 16:02 By One reason organizations have difficulty defending against cyber threats is their attack surfaces are constantly growing, creating more entry points for bad actors to target. And target they will, creating an onslaught of alerts that drive the need for

Email Security Must Remain a Priority in the Wake of the LabHost Takedown and BEC Operator’s Conviction 2024-05-22 at 21:02 By Two positive steps were taken last month to limit the damage caused by phishing and Business Email Compromise (BEC) attacks when a joint action by UK and EU law enforcement agencies compromised the infrastructure

Using Trustwave DbProtect and Offensive Security Solutions to Protect Against Nation-State Cyber Threats 2024-05-16 at 16:01 By The US Director of National Intelligence (DNI) earlier this month gave a stark warning to the Senate Armed Services Committee detailing the cyberthreats arrayed against the US and the world from China, Russia, North Korea, and Iran. This

Defending the Energy Sector Against Cyber Threats: Insights from Trustwave SpiderLabs 2024-05-15 at 16:01 By It has always been clear, even before the Colonial Pipeline attack, that the energy sector is a prime target for not only criminal threat groups, but also nation-state actors. After all, halting fuel and energy supplies can quickly bring a region to

Trustwave SpiderLabs Unveils the 2024 Public Sector Threat Landscape Report 2024-05-14 at 16:03 By Trustwave SpiderLabs’ latest report, the 2024 Public Sector Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies details the security issues facing public sector security teams as they try to strike a balance between supplying needed services and deploying the cybersecurity necessary to

Uncovering the Dirty Secret of Open-Source Code and Its Risks for Organizations 2024-05-08 at 16:16 By Craig Searle Using open-source code exposes organizations to a tremendous amount of risk, yet this point is treated like a dirty little secret that nobody talks about. So, let’s live on the edge and take a minute to talk

Trustwave SpiderLabs Reveals the Ransomware Threats Targeting Latin American Financial and Government Sectors 2024-04-25 at 16:17 By Ransomware-as-a-service (RaaS) threat groups are placing severe and continuous pressure on the financial and government services sectors in Latin America, according to data compiled by the elite Trustwave SpiderLabs team. This article is an excerpt from Trustwave Blog

Law Enforcement Must Keep up the Pressure on Cybergangs 2024-04-16 at 16:01 By Craig Searle The (apparent) takedown of major ransomware players like Blackcat/ALPHV and LockBit and the threat groups’ (apparent) revival is a prime example of the Whack-a-Mole nature of combating ransomware gangs that often takes place. However, this level of difficulty doesn’t mean

Balancing Innovation and Security: How Offensive Security Can Help Navigate the Tech Industry’s Dual Challenges 2024-04-11 at 16:01 By Two of the greatest threats facing technology-focused organizations are their often-quick adoption of new technologies, such as artificial intelligence (AI), without taking security measures into consideration and a very high reliance on third-party vendors to operate

Healthcare Industry on High Alert: Trustwave Research Reveals Cyber Threats Persist 2024-04-09 at 16:17 By Recent cyberattacks and the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) research indicate the danger facing the healthcare industry is not subsiding, which means healthcare providers must maintain a high level of alert and continue

How Managed Detection and Response Helps Address the Weak Link in Cybersecurity Defenses: People 2024-04-08 at 16:01 By Trustwave SpiderLabs’ recent threat report on the hospitality industry included a reminder that people are the weakest link in most any cyber security plan, along with some sobering points demonstrating how employees are being challenged more than ever by