PHP version 5.3.1 was just released. This release contains a patch for a denial of service condition we’ve reported some time ago.
The problem is related with PHP’s handling of RFC 1867 (Form-based File Upload in …

The US Air Force’s mission is to fly, fight and win… in air, space and Cyberspace.  US Air Force has an elite force defending people from millions of cyber attacks every day in their newest …

The earliest public mention I could find of SQL Injection (‘piggybacking SQL statements’ as the author put it) was from someone who called himself Rain Forest Puppy (RFP). In 1998 RFP wrote an article for …

Release Date: 2009/10/29
Author: Bogdan Calin (bogdan [at] acunetix [dot] com)
Severity: Critical
Vendor Status: Vendor has released an updated version
Release Date: 2009/10/29
Author: Bogdan Calin (bogdan [at] acunetix [dot] com)
Severity: Critical
Vendor Status: Vendor has released …

An anonymous user posted usernames and passwords for over 10,000 Windows Live Hotmail accounts to web site PasteBin.
PasteBin is currently down for maintenance but I managed to get a copy of the list and quickly …

Three men, responsible for the largest data security breach in U.S. history, stole 130 million credit and debit card numbers from five leading companies.  They took advantage of a coding error, and allegedly used a …

Earlier on this year, a report from SANS institute showed that two of the twenty five most dangerous programming errors, led to more than 1.5 million website security breaches in 2008.  The report is a …

As stated in previous blog posts, hackers don’t just hack websites to steal online databases and credit card details.  Hacktivism, where innocent websites are defaced from malicious users to transmit their political view or opinion, …

Department of Defence and other investigators, are investigating two U.S. Army web server breaches which were never publicly disclosed.
On 19th September 2007, and 26th January 2008, a Turkish hacker group known as “m0sted” successfully probed …

We have created a twitter account for Acunetix. We plan to use this for announcements, as well as product release notifications.
Follow us on Twitter http://www.twitter.com/acunetix