Looks like the Mac is finally getting what’s been coming: Mac Malware. And lots of it just recently with the Flashback infection that apparently impacted up to 700,000 Macs. We’ve all heard it from the Mac bigots: One of the main reasons I use a…
Web Application Firewall (WAF) and the false sense of security
A Web Application Firewall (WAF) is an excellent last line of defense. Based on what I see in my testing they’re great at blocking both automated scans and granular exploits like Cross-Site Scripting and SQL injection. I recommend WAFs to clients all the time. But…there’s…
Invicti Web Vulnerability Scanner Introduces New Security Check for PHP-CGI Installations
We are pleased to announce an updated build of Invicti Web Vulnerability Scanner 8 (WVS 8). Build number 20120508 includes a number of new scheduler features, a new security check for PHP-CGI, as well as a series of bug fixes.
How to Configure Secure WordPress Database Permissions
The WordPress database is the most important component of your WordPress website. It contains all the content of your website, such as information about your users and all your posts, etc. In order to access the database, a database user should have specific privileges that…
FAQ: How do I Scan Multiple Websites with Invicti Web Vulnerability Scanner?
Running multiple instances of Invicti Web Vulnerability Scanner (WVS) allows you to scan multiple websites simultaneously. Each instance can scan one website at a time – you can have up to two instances of all Invicti WVS editions or up to ten instances if you…
Web Security Tip of the Week: Update to WordPress 3.3.2
Just recently, the WordPress development team released the latest and greatest version of the web platform – WordPress 3.3.2. It is always important that you update your WordPress installation to the latest version, as it addresses bug fixes and security issues reported in the previous…
Invicti Web Vulnerability Scanner Voted WindowSecurity.com Readers’ Choice Award Winner of 2012
Invicti Web Vulnerability Scanner Wins the WindowSecurity.com Readers’ Choice Award for the Fifth Successive Year Leading Windows Security resource site, WindowSecurity.com, has announced that Invicti Web Vulnerability Scanner has been selected as the winner of the 2012 WindowSecurity.com Readers’ Choice Awards, in the Web Application…
Not All Web Vulnerabilities Are What They Appear to Be
When performing web security assessments, it’s easy for us to feel confident in what we see. Take Cross-Site Scripting (XSS) for instance. Your scanner finds this web vulnerability. You validate that it does indeed exist. What more is there to do? Well, it depends on…
The Value of Web Exploitation
Is the exploitation of web vulnerabilities worth the trouble? Does it create unnecessary risks that should be avoided? Why exploit flaws anyway? This is not a black and white circumstance. Every situation is unique. But here’s what I know. The exploitation of web security flaws…