The 2011 Verizon Data Breach Investigations Report is out. Yeah, yeah, yeah – yet another report telling us what a bad state of security we’re in and that we need to fix all sorts of things in IT. Okay, I’m not going to complain too…
But Compliance is Someone Else’s Job!
Regulatory ‘compliance’ – it’s a dirty word in business today. Perhaps that’s because we’re being force-fed more and more rules that various governing bodies believe are the best ways for us to run our businesses. Regardless of what side of the government growth – and…
Protecting Your Brand with a Secure Website
These days, everyone and their grandmother has a website or blog. It’s becoming more and more common for the average person to have a website, whether it’s for informational purposes or as a way to promote a product or service. Either way, there is a…
MySQL.com Victim of SQL Injection Attack
Introduction On 27th March 2011 a message was posted on the popular Full Disclosure mailing list exposing a recent hack against the website mysql.com. This vulnerability was apparently also reported by a hacker called TinKode, who also claims to have found a cross site scripting…
"Invicti Quickly Detects a Wide Variety of Vulnerabilities"
With all the talk lately, especially in the OWASP LinkedIn forum, about the most expensive web scanners being the so-called best, Infosec Island have put the far more affordable Web Vulnerability Scanners to the test. By using two well known web applications that were purposely developed with…
Do you have WordPress Security? Part II
In part I of Do you have WordPress Security, we asked some vital questions relating to keeping your WordPress website and blog secure. Here is the concluding part of the article. Secure WordPress Plugins WordPress plugins are another classic example of how hackers are quickly…
Invicti Web Vulnerability Scanner Version 7 Build 20110406 Released
An updated build of Invicti Web Vulnerability Scanner Version 7 has now been released. The new build features a new improvement with the AcuSensor details as well as fixing a few bugs to bolster stability. New feature: AcuSensor details are now exported in the report…
Do you have WordPress Security?
WordPress has become the leading Blogging platform and Content Management System (CMS)Â for users all over the world. Larger firms are now turning to WordPress due to the numerous benefits and features it provides. However, just like every piece of software, there are security vulnerabilities that…
Don’t Overlook the Importance of Authenticated Testing
Would you want to rely a home inspector’s analysis of just the outside of a new home you’re considering for purchase? What about a lab tech only running a partial CT scan or the radiologist analyzing only part of your MRI when your health is…