Itâs becoming quite clear that this is an age of increased malware and security threats. The news is becoming more and more flooded with these kinds of reports and many of them are from reputable companies that end up looking stupid because of a vulnerability…
FAQ: Can I scan a website that uses URL rewrite without specifying URL rewrite rules in Invicti WVS?
Although it is not a suggested operation, yes, you can still scan a website which has URL rewrite enabled without specifying any URL rewrite rules in Invicti Web Vulnerability Scanner. Unlike other scanners, Invicti WVS will advise you once it detects that the target website…
Invicti WVS Version 6.5 build 20100203 released
An updated build of Invicti WVS Version 6.5 has been released with a number of new security checks, improvements and bug fixes. New security checks: 8.3 DOS filename source code disclosure Apache Tomcat Directory Host Appbase authentication bypass vulnerability Apache Tomcat WAR File directory traversal…
Malware Scanning – Customer Scenario
MalwareâŚÂ Yes, its been around for many years. However the attack vector has changed. Long ago the primary distribution method was by sharing dirty data (yes, exchanging floppy disksâŚ.remember those days?! Then it went onwards into distributing viruses and malware via email (this is the…
e107 CMS system website compromised
As part of my job here at Invicti, from time to time I analyze source code looking for security problems. Using this information I adjust Invicti WVS to detect these problems automatically (when it’s possible). Monday, I downloaded e107 from e107.org and started analyzing the…
How you get affected by Malware – Customer Story
One big thing that is missing from this industry is empirical trend data that supports the TRUE risks and costs associated with hacking and malware infections. To date, weâve written quite alot about customer-specific impacts when they are infected. The âresultsâ run the gambit of…
Security is hard
The year debuted with ‘Operation Aurora‘: Google and over 30 other companies were hit by a spear phishing attack which resulted in theft of intellectual property from Google and probably other companies. Spear phishing is a targeted form of phishing in which an e-mail message might look…
2009 Security News Update – PCI Council, Aweber, Adobe – Hacks and Cracks
Back for the last entry of 2009, here are the latest updates in the security world: Aweber announces its own incursion into its site, unnumbered amount of email addresses pilfered. AWeber was recently the victim of an intentional attack to mine email addresses. Weâd like…
A Malicious Website Hacker Attacks – CitiGroup Denies Knowledge
While I try and not to be so graphic with my comments, I canât help but feel CSI-esque lately with all of these website hacker attacks. So here we go again. This time, its CITI. Just reported today by marketwatch.com, Citigroups stock sank significantly based…