Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

HTML Smuggling: How Blob URLs are Abused to Deliver Phishing Content

HTML smuggling techniques have been around for quite some time. A previous Trustwave SpiderLabs’ blog discussed its use in distributing malware by storing binaries in immutable blob data within JavaScript code that gets decoded on the client-side browser, eventually delivering the payload.

Public Sector Breach Alert: Q3 2024

The public sector has faced a surge of cyber attacks in recent months, targeting state agencies, schools and local governments, severely affecting operations. Several recently released cyber industry reports show a steady or growing number of ransomware attacks so far in 2024. The examples below are just some of the cyber attacks against public sector organizations this past summer.

Microsoft Copilot for Security - Proper Configuration is the Key

Microsoft Copilot for Security is a powerful new artificial intelligence tool that can help companies home in on credible cybersecurity threats amid an onslaught of noise. However, significant expertise is required to configure and operate it properly and avoid unnecessary costs. These are a few key takeaways from the webinar, "Getting Started with Microsoft Copilot for Security", presented by Dan Gravelle, Director of Global Solutions Architecture at Trustwave.

The Machine War Has Begun: Cybercriminals Leveraging AI in DDoS Attacks

In the digital landscape, the integration of Artificial Intelligence (AI) into cybercriminal activities has marked the beginning of a new era of threats. The “machine war” has indeed commenced, with AI enhancing the scale and sophistication of cyberattacks. Distributed denial of service (DDoS) attacks, in particular, have become more formidable with AI’s capabilities, presenting significant challenges for cybersecurity defenses.

Two New IDE's get Veracode Scan

We're happy to announce two new Veracode Scan products: Veracode Scan for Eclipse and Veracode Scan for Visual Studio. Building on the success and adoption of Veracode Scan in Visual Studio Code, IntelliJ, PyCharm, and Rider, we're releasing versions for Eclipse and Visual Studio. Now the power of Veracode’s outstandingly accurate Static Application Scanning is avaialble two of the most widely used and customer-requested IDE’s.

Why is Vulnerability Management-as-a-Service Essential for Businesses?

As cyber threats get smarter and more common, companies of all sizes need to make vulnerability management a top priority to keep their private data safe and their operations running smoothly. Traditional vulnerability management methods, which involve a lot of manual work and restricted visibility, aren't working well against the complicated problems that modern cyberattacks pose.

O365 Monitoring: Ensuring Security and Efficiency in Your Office 365 Environment

Many businesses depend on cloud-based tools like Office 365 to run their daily business. Because of this, O365 monitoring has become much more important for making sure that your Office 365 environment runs easily, safely, and effectively. Office 365 is more than just an email service; it's a full suite with efficiency apps, tools for working together, and storage for files. But this huge environment could also be a target for cyber threats, so it's important to keep an eye on and protect its activities.

Combat Cybercriminals With Sound Office Policies

According to the FBI, cybercrime cost American businesses $12.5 billion in 2023. More worrying was that this was a 22% increase from the previous year, even though there were fewer complaints in 2023. Just over 60% of those losses were due to phishing emails, showing that humans are the weakest link. As a result, you need to ensure that your office policies are on point. In this article, we'll look at where to focus your efforts. We'll discuss physical security, third-party vendors, and training your team.

Are Existing Security Protocols Enough for the Advancements in VR Tech?

Virtual reality (VR) has come a long way from being a futuristic concept to a widely used technology. It's not just about gaming anymore; VR is making waves in education, healthcare and even corporate training. As companies dive into the world of VR, the question arises: are existing security protocols enough to keep up with these advancements? This is particularly important in sectors like education and healthcare where data security is paramount.

Are Bitcoin ATMs Safe? Security Tips for Users

Navigating the world of Bitcoin ATMs can sometimes feel like walking through a digital forest, full of potential rewards but also hidden risks. You've likely seen these machines popping up in various locations, offering a bridge between physical cash and digital currencies. However, as you stand in front of one, you might wonder about the safety of these transactions and what you can do to protect your investments. With the right knowledge and precautions, you can significantly reduce your vulnerability to common threats.