So Many Vulnerabilities, So Little Time
Getting application security vulnerabilities under control is harder than it sounds. Follow these four steps to help your company get started.
ZeuS.Maple Variant Targets Canadian Online Banking Customers
Trusteer security research team identified a series of attacks carried out by a new ZeuS.Maple variant that targets customers of leading Canadian banks.
Security Judo with Security Intelligence and Network Forensics
How Security Intelligence and Incident Forensics enable security operations teams to quickly find malicious attackers.
Meet the Zberp Trojan
Recently Trusteer researchers discovered a new Trojan that has been targeting more than 450 financial institutions around the world, mainly in the US, UK and Australia. The new Trojan which seems to be a variant of the well-known Zeus Trojan (aka...
Analysis of Recent Struts Vulnerabilities in Parameters and Cookie Interceptors, Their Impact and Exploitation
An analysis of the recent Struts vulnerabilities in parameters and Cookie Interceptors, their impact and one possible way to exploit them.
Detection Is NOT the New Prevention
What does it take to stop today's extremely motivated and well-trained cyber attackers? Is prevention pretty much dead? Is rapid detection the new prevention? There has been a dangerous shift recently in the prevailing wisdom of the security...
Underground Cybercrime: Exploits for Sale
Trusteer's security team has recently identified a new offering from a Russian cybercrime forum member: An exploit that, according to the seller, is successful 95 percent of the time.
What You Need to Know to Survive Windows XP’s End-of-Life
After almost 13 years of Windows XP, Microsoft announced that the still-popular operating system (OS) has reached its end-of-life (EOL). This means that Microsoft will no longer provide patches to new vulnerabilities found in Windows XP.
What to Do to Protect against Heartbleed OpenSSL Vulnerability
More than half of web servers on the internet use OpenSSL to safeguard data and user accounts. Versions 1.0.1 through 1.0.1f are vulnerable to an exploit that may expose user credentials, credit card data, sensitive documents and the server's...
Improve Application Security Immediately with These 5 Software Development Practices
SQL injection and cross-site scripting are the most prevalent Web application vulnerabilities and have been for many years. We know how to avoid introducing these code flaws into our applications. Here are five easy steps to get closer to...