Telstra, Australiaâs largest telephone operating company, revealed yesterday that its internal corporate network Pacnet had been compromised via an SQL Injection attack. So far it is not yet known what exactly was taken from the network, but it is clear that the perpetrators had complete…
CeBit Australia 2015 highlights
Invicti exhibited at CeBIT, Sydney Olympic Park, Australia between 5-7 May 2015. Thank you to all prospective customers and resellers who visited our stand.
RSA Conference 2015 Highlights
Invicti recently travelled to San Francisco to exhibit at the RSA Conference 2015. This week-long conference was attended by over 30,000 security professionals. A big thank you goes out to all who dropped by the Invicti stand.
Genericons DOM-based XSS Vulnerability
Hundreds of WordPress themes and plugins that make use of the Genericons package, could be vulnerable to a DOM-based XSS vulnerability affecting millions of WordPress installations. Genericons are versatile vector icons embedded in a webfont from Automattic (the creators of WordPress). The vulnerability resides in…
Double the bang for your buck with Invicti Online
Existing customers awarded their license equivalent in free network scans London, 5th May 2015 – Invicti have announced that they are extending their current free offering of the network security scan, part of their cloud-based web and network vulnerability scanner. Those signing up for a…
Can I use a Free Scan Target to scan for web vulnerabilities?
Free Scan Targets pertain to perimeter servers which you can scan for network vulnerabilities only. Invicti Online customers can upgrade a Free Scan Target to a licensed Scan Target in order to scan the target for web vulnerabilities. This can be done by clicking on the…
What the Verizon Report 2015 tells us about web app attacks
Verizonâs annual report, now in its eighth year, analyzes breach intelligence and data from multiple sources, including customers of Verizonâs forensics response division and customers of FireEye, the firm that investigated the recent hack of Sony Pictures Entertainment. It also examines data from cases investigated…
WordPress 4.2.1 Security Release addresses yet another XSS vulnerability
Yesterday, WordPress announced another security release, urging all users to update all WordPress installations immediately. WordPress Security Release 4.2.1Â fixes yet another Stored Cross Site Scripting (XSS) vulnerability, which allows an unauthenticated user to inject JavaScript in WordPress comments. The injected script can be affect both…
Invicti helps Sendy discover and remediate their vulnerabilities
âInvicti allowed us to identify some major vulnerabilities before hackers were able to exploit them. This has made Sendy a far more secure application and hugely reduced the risk of us being breached.â Ben Ho, Developer, Sendy Sendy is a self hosted email newsletter application…