Invicti, organized a series of free workshops in St. Louis and New York City in November 2013. This culminated in Invicti’s participation at OWASP AppSec USA – the premier North American OWASP conference – at the Marriott Marquis in Time Square, New York. The workshops proved…
Invicti Announces Beta Release of Online Vulnerability Scanner
MALTA, 4 December 2013- Invicti today announced the beta release of its latest product, Invicti Online Vulnerability Scanner. Responsive, scalable and centralised with unmatched deep crawling and scanning capabilities, Invicti Online Vulnerability Scanner promises to help businesses of any size protect their websites, web applications…
Invicti Exhibited at GITEX Technology Week 2013
Comguard, an official Partner for Invicti Web Vulnerability Scanner based in the United Arab Emirates, participated in the GITEX exhibition held between October 20th and October 24th 2013 at the Dubai World Trade Centre. Invicti was showcased as one of the key vendors for Comguard at…
Latest Improvements in the Detection of DOM XSS Vulnerabilities
The latest build of Invicti Web Vulnerability Scanner (Build 20131023) released yesterday, contains important improvements in the detection of DOM XSS vulnerabilities. Our DeepScan technology was also further strengthened in this build. Take the following piece of code for example: This code is vulnerable to…
Latest WVS v9 build with new DOM XSS checks that can be injected in HTTP GET parameters
Invicti Web Vulnerability Scanner version 9, build 20131023 includes new DOM XSS checks for the type of DOM XSS vulnerabilities that can be injected in the HTTP GET parameters. This new build also includes the option to automatically save scan results to disk after a…
Invicti and Aquion Participate in AISA National Conference
The 6th annual AISA National Conference, held at the Sydney Exhibition and Convention Centre on 10th October 2013, hosted over 900 experts and professionals from the Information Security industry. Invicti showcased at the information odyssey-themed event in collaboration with Aquion, an official Invicti Partner based…
XSS Vulnerability injected through Google Analytics, executed in IOS’s Gmail application
Roy Castillo, a security researcher from the Philippines, identified a cross-site scripting (XSS) vulnerability in the Gmail application for iOS. The vulnerability was found in the mail attachment feature and needed no user interaction to be triggered. In a post on his blog, Roy Castillo…
IT Security Includes Cyber Attack Response
Preventing cyber attacks is a dominant topic for IT security. It is the first layer of defense. The more attacks prevented the better – no question about it. However, does great prevention guarantee there will no successful cyber attacks? Of course not. Good Security is…
Critical vulnerabilities discovered in Gazelle and TBDEV.net
Gazelle and TBDEV.NET are the most popular web applications used as BitTorrent trackers. A BitTorrent tracker is an application that assists in the communication between peers using the BitTorrent protocol. BitTorrent trackers can be public/open where anybody can join or private (where an invitation is…