Trustwave

Trustwave SpiderLabs ransomware tracker noted a slight dip in the overall number of attacks that took place in November 2025, but the research team saw the threat group Cl0p surge, conducting 98 attacks during the month, up from just 13 in October. Trustwave SpiderLabs, A LevelBlue Company, derived the information from its ransomware-tracking tool, which gathers data from a variety of open intelligence sources and our own proprietary research.

3 Minute Read Unexpected attacks are the hardest to fend off. In the realm of cyber, Zero Day vulnerabilities are among the greatest risks, as these software flaws are unknown and exploited before a fix is available, potentially compromising the thousands of organizations that are unwittingly using vulnerable software.

2 Minute Read The merits of deploying offensive testing to strengthen an organization’s security posture are well-understood by today’s security leadership. Much to the relief of defenders, obtaining approval for an offensive security exercise has never been easier. However, the process of selecting the most appropriate offensive testing solution requires untangling overlapping definitions and vaguely defined terminology that leaves security teams more confused than when they started.

4 Minute Read Black Friday Cyber Threats: As retail sales peak, cybercriminals ramp up attacks, targeting vulnerabilities in retail businesses during the holiday rush. Retailers Under Siege: In 2025, a significant number of retailers, including major brands, experienced increased cyberattacks, highlighting the urgent need for enhanced cybersecurity.

3 Minute Read Evolving AI Governance: As artificial intelligence becomes integral to decision-making, organizations must prioritize effective governance that fosters innovation while protecting values. Addressing Risks: Recognizing the broader spectrum of AI risks, including bias and privacy concerns, is crucial for anticipating potential issues and fostering responsible AI usage.

Trustwave SpiderLabs researchers have recently identified a banking Trojan we dubbed Eternidade Stealer, which is distributed through WhatsApp hijacking and social engineering lures. In this blog post, we will break down the techniques used in the campaign and highlight the new tools employed by the threat group. WhatsApp continues to be one of the most exploited communication channels in Brazil’s cybercrime ecosystem.

5 Minute Read CPT vs. Bounties: CPT is a time-boxed, structured test for compliance reports with a fixed cost. Bug Bounty is ongoing, open-ended discovery paid per valid vulnerability found. Mitigate Key Risks: Watch for poor researcher vetting, potential data exposure/exfiltration by bad actors, and labor misclassification risks from global contractor engagement.

4 Minute Read LevelBlue Labs is tracking a severe vulnerability in Windows Server Update Services (WSUS), CVE-2025-59287, that allows attackers to remotely execute code without authentication and is being exploited by threat actors to compromise vulnerable Windows Server users. Windows Server Update Services (WSUS) is a Microsoft tool that enables IT administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers in a corporate environment.

Cyber meets physical security: Weak passwords and outdated systems may have opened the door to the thieves. A warning for all industries: The Louvre incident shows why converging cybersecurity and physical security is essential.

2 Minute Read The future of retail cybersecurity: Explore insights from 220 retail executives on managing AI-driven threats and closing the cyber resilience gap. 44% of retail organizations report a sharp increase in cyberattacks, underscoring the urgent need for stronger cybersecurity defenses across the sector. 34% of retailers experienced a data breach in the past year, revealing the persistent vulnerabilities in retail cybersecurity strategies.