Identify the Heartbleed Bug with Acunetix Vulnerability Scanner

Featured Article

The Aftermath of the Heartbleed Bug

April 17, 2014 - 09:34am

The Heartbleed bug, a security flaw in the popular OpenSSL library used for data encryption, has taken the web security world by storm, and the victim toll has started to rise. The first reported victims include the Canada Revenue Agency ... [+]


It Fell Off a Truck: Top Ten US Data Breaches for 2012

It Fell Off a Truck: Top Ten US Data Breaches for 2012

According to Ericka Chickowski in her 29 November article for Dark Reading, “10 Top Government Data Breaches Of 2012,” SQL injection, post-phishing and inadequately secured back-up information all contributed to spectacular comprises of data across the USA in 2012. Some … [+]

The email that hacks you

The Email that Hacks You

Update: Seems to be working on TP-Link Routers as well (tested on TL-WR841N). Update2: Arcor EasyBox A600 also seems vulnerable. Opening a legitimate looking email on an iPhone, iPad or Mac while using an Asus router with a default or guessable password … [+]

It’s No Picnic: NBC Websites Hacked

It’s No Picnic: NBC Websites Hacked

On November 4th, Steven J. Vaughan-Nichols of ZDNet, who covers security, posted on his blog that NBC had suffered a hack on a number of its websites during the early morning of Sunday, November 4th. According to Vaughn-Nichols, as of … [+]

New and Improved Security Features with Acunetix Update 20121113

New and Improved Security Features with Acunetix Update 20121113

We’ve just released an update for Acunetix Web Vulnerability 8 – build 20121113 – which gives you a brand new PHP code execution test for Invision Power Board, as well as a number of improvements and fixes. New Security Checks New PHP code … [+]

Imperva and Acunetix Partner to Virtually Patch Web Vulnerabilities

Imperva and Acunetix Partner to Virtually Patch Web Vulnerabilities

SANTA CLARA and REDWOOD SHORES, CALIFORNIA, USA & LONDON, UK – November 14, 2012 – Acunetix, a market leader in web application security technology, and Imperva, Inc. (NYSE:  IMPV) a pioneer and leader of a new category of business security … [+]

Automate more with the new Acunetix WVS 8 build

Automate more with the new Acunetix WVS 8 build

The new Acunetix Web Vulnerability Scanner build number 20121106 includes a number of new features, new security checks, product improvements and as well bug fixes. To help web security experts automate their work, in this new build we included a … [+]

Directory Listing and Information Disclosure

Directory Listing and Information Disclosure

Directory listing is a web server function that displays a list of all the files when there is not an index file, such as index.php and default.asp in a specific website directory. … [+]

Website Vulnerabilities Will Cost You

Website Vulnerabilities Will Cost You

Even the best websites are vulnerable to hacking. Though web security continues to improve, hackers are constantly developing new ways to attack and disable corporate and government sites. Hackers are now attacking web-based applications, including shopping carts, webforms, login pages … [+]

National Weather Service Hacked

National Weather Service Hacked

The National Weather Service has been hacked by the Kosova Hacker’s security group, leading to sensitive server information being leaked. The group managed to hack into the server using a Local File Inclusion (LFI) vulnerability in the weather.gov website. … [+]

What can Developers do to Better Protect PII?

What can Developers do to Better Protect PII?

A client of mine recently asked me if I had any Web development related tips for dealing with Personally Identifiable Information (PII). With this being an information security 101 type question, I had to think about it for a bit. … [+]