There is no magic bullet when it comes to web security. That said, there is one thing that can buy you more security than practically anything else. It’s your passwords. Your choice in – and management of – your web passwords can make or break…
Acunetix Web Vulnerability Scanner Version 8 build 20121003 released
The new Acunetix Web Vulnerability Scanner 8 build includes a new crawler feature to automatically ignore duplicate input schemes in the same directory. With this new crawler feature, scans will take less time to complete and less traffic is generated during a scan. The new…
HTML Form Found in Redirect Page Web Vulnerability
When creating a password protected section for a website, such as an admin portal for a CMS solution, typically developers check if the user session is authenticated. If the user session is not authenticated, the user is redirect to the login page. Maybe because the lack of…
How Aware Do We Have to be Not to Fall for the Bad Guys Antics?
Criminal hackers are getting more and more creative in their phishing and social engineering attacks on the web. This not only puts your website in the crosshairs but also your own personal information. A common question that comes up is: How do I stay in…
What’s the Best Way to Find Web Security Flaws?
With all of the potential ways the bad guys can exploit websites (literally thousands), many people want to know what the best way is to actually uncover these flaws. Well, there’s no magic bullet answer, however, generally speaking Web flaws can be discovered in one…
Scanning a Shopping Cart with an Automated Security Scanner
Many of today’s large scale websites are template based. This means that most of the website pages which users visit are usually built from the same template file. Thus it is normal for a template based websites to be made up of about 20 or…
New Features and Security Checks Added to Acunetix Web Vulnerability Scanner 8
The new build of Acunetix Web Vulnerability Scanner released today includes a number of new features, new security checks and also a number of bug fixes. Ideal for scanning and securing today’s complex custom web applications, the main new feature allows importing of multiple HTTP…
Should you Test Development, Staging or Production?
You’ve heard me say that planning is half the battle with Web security assessments. I’m finding that more and more people are on board with thinking things through in advance but there’s still one area that’s not getting the attention it deserves. It’s deciding on…
Why Web Security is Not Just IT’s Problem
What’s your take on Web security? Do you see it as one of those techie things that other people should be handling? Or do you see it as your responsibility to ensure everything associated with your Web presence is in check? Well, according to a…