Identify the Heartbleed Bug with Acunetix Vulnerability Scanner

Featured Article

The Aftermath of the Heartbleed Bug

April 17, 2014 - 09:34am

The Heartbleed bug, a security flaw in the popular OpenSSL library used for data encryption, has taken the web security world by storm, and the victim toll has started to rise. The first reported victims include the Canada Revenue Agency ... [+]


Application Security; Don’t get caught off guard with dangerous assumptions

Application Security; Don’t get caught off guard with dangerous assumptions

Don’t get caught off guard. We hear that statement all the time with regards to information security. Sadly, as many businesses have experienced, such talk is cheap. Obviously no one wants their Web site to get hacked. Okay, maybe a … [+]

Acunetix WVS Version 7 build 20101028 released

An updated build of Acunetix WVS Version 7 has been released.  This build addresses a number of bug fixes. Bug Fixes: Fixed: Replay of recorded login sequences was not working properly in the free version Fixed: NTLM authentication was not … [+]

Preventing phishing attacks is not just a technical issue

Preventing phishing attacks is not just a technical issue

A client of mine who’s a security administrator for a business in the financial industry contacted me recently about some odd behavior he was seeing on his network. Apparently numerous spidering/mirroring requests were being sent to his company’s marketing website … [+]

Internet Voting Trial Thwarted by Hackers

The District of Columbia recently attempted to give the opportunity to number of people who live or work overseas to be able to cast their vote remotely. To do this a secure E-Voting website costing over $300,000 was built. On Tuesday, September 28 2010 the first public trial run was launched. Thirty-six hours later the voting system was hacked by a student. It took nearly three days for D.C officials to realize that their system was compromised. The trial was immediately suspended and red-faced engineers and politicians quickly scrambled to find out how this breach could possibly have happened.
[+]

Four skills that will make you a better Web security professional

Four skills that will make you a better Web security professional

People who are at the top of their games such as Formula One engineers, neurosurgeons, stunt pilots and so on have one thing in common: they all have finely-tuned technical skills. This is not just specific knowledge of what they … [+]

Acunetix WVS Version7 build 20101012 released

An updated build of Acunetix WVS Version 7 has been released.  It includes two bug fixes. Bug fixes: … [+]

Why all the hoopla over the Twitter onMouseOver flaw?

Why all the hoopla over the Twitter onMouseOver flaw?

The recent publicity and ranting about Twitter’s onMouseOver flaw* got me thinking about our perception of software quality and expectations of risk. Why is there no room for error when Twitter makes a mistake yet we put up with so … [+]

Acunetix WVS Version 7 build 20100921 released

Acunetix WVS Version 7 build 20100921 released

An updated build of Acunetix WVS Version 7 has been released.  Apart form a number of improvements and bug fixes, this build will also automatically check for the latest OpenX OFC file upload and the ASP.NET padding Oracle vulnerabilities. New … [+]

How to check if your application is vulnerable to the ASP.NET Padding Oracle Vulnerability

How to check if your application is vulnerable to the ASP.NET Padding Oracle Vulnerability

Everybody’s talking about the ASP.NET Padding Oracle vulnerability released a few days ago at the ekoparty Security Conference. However, until now there wasn’t enough information on how do you check if your application is vulnerable or not. Yesterday, Duncan Smart … [+]

Why do so many people buy into "checklist" audits?

Why do so many people buy into "checklist" audits?

Probably my biggest pet peeve related to application security is the claim by many (typically management) that “We know we’re secure, we just had an audit”. I can’t tell you how many times I’ve seen this situation. Management will require … [+]