Storm-0558 and the Dangers of Cross-Tenant Token Forgery 2025-05-21 at 23:02 By Damian Archer Modern cloud ecosystems often place a single identity provider in charge of handling logins and tokens for a wide range of customers. This article is an excerpt from SpiderLabs Blog View Original Source
Storm-0558 and the Dangers of Cross-Tenant Token Forgery Read More »
Guarding Against Dependency Attacks: Essential Strategies for Modern Application Development 2025-05-16 at 19:45 By Pauline Bolaños Dependency management is one of the biggest challenges in modern software development. This article is an excerpt from SpiderLabs Blog View Original Source
From Simulation to Strategy: Evolving Your Red and Purple Teaming Approach 2025-05-13 at 16:01 By Red and Purple Teaming: Strategic Evolution – Discover how modern security assurance programs are shifting from one-off simulations to strategic, continuous improvement. Real-World Insights from Security Leaders – Learn from Trustwave experts on leveraging red and purple team testing to uncover security […]
From Simulation to Strategy: Evolving Your Red and Purple Teaming Approach Read More »
Migration Made Easy Using Trustwave’s Microsoft Security Migration Program 2025-05-05 at 23:50 By The need to purchase, install, and optimize cybersecurity technology is not up for debate. No organization is immune to the possibility of a cyberattack, which means each must be prepared to defend themselves to reduce the likelihood of a successful attack. This […]
Migration Made Easy Using Trustwave’s Microsoft Security Migration Program Read More »
Why Image Analysis is a Crucial Component of an Email Security Solution 2025-04-24 at 18:12 By While it’s well-known that email represents a significant source of cybersecurity threats, it’s not just the text included in emails that’s worrisome; images can be malicious as well. What’s more, images in emails may also present a threat of […]
Why Image Analysis is a Crucial Component of an Email Security Solution Read More »
Agent In the Middle – Abusing Agent Cards in the Agent-2-Agent (A2A) Protocol To ‘Win’ All the Tasks 2025-04-21 at 23:40 By Tom Neaves I think you’ll agree with me that growth in the AI landscape is pretty full-on at the moment. I go to sleep and wake up only to find more models have […]
Top Online Shopping Tips for Retailers and Consumers 2025-04-21 at 17:07 By Stay Safe While You Shop: Learn how to avoid common online shopping scams and protect your payment information. Expert Insights: Discover practical tips from cybersecurity professionals on secure payment methods and fraud prevention. Retailer Best Practices: Find out how businesses can strengthen their […]
Top Online Shopping Tips for Retailers and Consumers Read More »
Securing the Energy Sector: The Backbone of the UK’s AI Ambitions 2025-04-11 at 16:08 By Ed Williams AI and Energy Security: The UK’s Crucial Cybersecurity Challenge – Learn why safeguarding the energy sector is critical for the UK’s AI ambitions and technological leadership. Rising Cyber Threats: Ransomware and Legacy Systems in the Energy Sector – […]
Securing the Energy Sector: The Backbone of the UK’s AI Ambitions Read More »
Why Strong Passwords are Still the Best Defence Against Cyber Threats 2025-04-08 at 16:29 By Jason Whyte Weak passwords are a leading cause of cyber breaches, contributing to 86% of incidents. Strong password policies and practices significantly reduce the risk of attacks. Implementing additional measures like multifactor authentication (MFA) and password managers enhances security. After […]
Why Strong Passwords are Still the Best Defence Against Cyber Threats Read More »
Why Strong Usernames Matter for Your Online Security 2025-04-07 at 16:02 By Damian Archer Protect Your Privacy: Using the same username across accounts can expose personal information and increase the risk of extortion and data theft. Reduce Breach Impact: Unique usernames, combined with strong passwords, minimize the chances of hackers accessing multiple accounts after a […]
Why Strong Usernames Matter for Your Online Security Read More »
Phishing Attacks Are Evolving – Is Your Email Security Keeping Up? 2025-04-04 at 16:02 By Craig Searle Phishing attacks cost businesses millions—learn why email security is about more than just passing a test. Strengthen your email security culture with leadership support, continuous training, and adaptive strategies. Discover how Trustwave MailMarshal enhances email security by blocking phishing threats before they reach your inbox. A […]
Phishing Attacks Are Evolving – Is Your Email Security Keeping Up? Read More »
How to Safeguard Critical Assets from the Growing Threat of Supply Chain Cyberattacks 2025-03-31 at 16:12 By Craig Searle Understanding Supply Chain Threats: Learn how cybercriminals exploit vulnerabilities in third-party vendors to gain unauthorized access to sensitive data. Real-World Cyberattack Examples: Explore high-profile supply chain breaches like the SolarWinds attack and their long-term impact on […]
How to Safeguard Critical Assets from the Growing Threat of Supply Chain Cyberattacks Read More »
Creating Operational Resilience: How to Align Compliance and Risk Management for Operational Success 2025-03-24 at 17:47 By Maddisson White Learn the Essentials of Operational Resilience: Discover what operational resilience means, why it’s a regulatory focus, and how it impacts your organization. Identify and Manage Risks Effectively: Understand your organization’s risk environment and apply proactive strategies to minimize […]
Why Principle of Least Privilege Matters More Than Ever in a World of Backdoored Large Language Models (LLMs) 2025-03-24 at 15:03 By Tom Neaves The concept of “principle of least privilege” has been around for a long time. In fact, it is older than me; there are papers from the 70s that discuss it: This article is […]
Fort Knox for Your Data: How Elasticsearch X-Pack Locks Down Your Cluster – Part 2 2025-03-20 at 18:47 By Karl Biron In Part 1 of Fort Knox for Your Data: How Elasticsearch X-Pack Locks Down Your Cluster, we uncovered the dangers of running Elasticsearch with X-Pack disabled and thus, highlighting the ease with which attackers […]
Fort Knox for Your Data: How Elasticsearch X-Pack Locks Down Your Cluster – Part 2 Read More »
Why Offensive Security Should Be a Top Priority, Not Just a Check-the-Box Compliance Requirement 2025-03-04 at 16:18 By Lisel Newton The following is a guest blog by Lisel Newton, Executive Director, Information Security, Risk & Compliance at Gossamer Bio. This article is an excerpt from Trustwave Blog View Original Source
Generative AI: Essential Insights for CISOs on Security Impacts 2025-03-03 at 16:04 By Generative AI (GenAI) is transforming the cybersecurity landscape, requiring Chief Information Security Officers (CISOs) and their teams to adapt quickly to both opportunities and challenges, according to the Gartner® report 4 Ways Generative AI Will Impact CISOs and Their Teams[1]. This article is […]
Generative AI: Essential Insights for CISOs on Security Impacts Read More »
2025 Trustwave Risk Radar: Top Cyber Threats Facing Manufacturing 2025-02-26 at 16:06 By 2025 Trustwave Risk Radar Report Unveils Top Cyber Threats to Manufacturing: Discover the key cybersecurity challenges facing the manufacturing sector in 2025, including ransomware, phishing, and vulnerabilities in legacy systems and connected devices. Manufacturing Cybersecurity: IT/OT Convergence and Breach Methods Exposed: Explore two in-depth […]
2025 Trustwave Risk Radar: Top Cyber Threats Facing Manufacturing Read More »
2025 Trustwave Risk Radar Report: Top Cyber Threats Targeting the Manufacturing Sector 2025-02-26 at 16:06 By 2025 Trustwave Risk Radar Report Unveils Top Cyber Threats to Manufacturing: Discover the key cybersecurity challenges facing the manufacturing sector in 2025, including ransomware, phishing, and vulnerabilities in legacy systems and connected devices. Manufacturing Cybersecurity: IT/OT Convergence and Breach Methods […]
2025 Trustwave Risk Radar Report: Top Cyber Threats Targeting the Manufacturing Sector Read More »
How the Trustwave NIS2 Maturity Accelerator Can Help Navigate NIS2 Compliance 2025-02-25 at 16:15 By The European Union (EU) Network and Information Security Directive 2 (NIS2) introduces stricter cybersecurity requirements than its predecessor, the original NIS Directive. With the compliance deadline fast approaching, in-scope organizations must take proactive steps to ensure they have enacted NIS2 […]
How the Trustwave NIS2 Maturity Accelerator Can Help Navigate NIS2 Compliance Read More »