Alert group: WordPress default “admin” account exists Acunetix WP Security Plugin test: During this test Acunetix looks for the default admin account in the WordPress user list. Repercussions: With the default WordPress administrator account active, a malicious user does not have to guess the username…
Acunetix WVS v9, build 20131009 checks for HTML Injection, detection of weak passwords in Joomla! and Django
Acunetix Web Vulnerability Scanner version 9, build 20131009 includes checks for HTML Injection, and adds the detection of weak passwords in Joomla! and Django’s Administrative interfaces. In addition, the new build includes the detection of readme documentation files, together with various other updates and fixes….
On the Increasing Popularity of JavaScript
Many people think of JavaScript as a way to create interactive and dynamic web pages. JavaScript gives visitors a great website experience across platforms and across browsers that can be adjusted and tweaked to fit the user’s device, interests, and history. Plus it creates a more…
Why You Need To Pay Attention To The Slow HTTP Attack
Okay, I admit, I haven’t been stressing enough to people just how critical the Slow HTTP vulnerability really is. The Slow HTTP flaw is present on practically every Apache-based system I test and can facilitate denial of service (DoS) conditions rendering even the most resilient…
The Role Of An Automated Web Vulnerability Scanner In A Holistic Web Security Audit
Easily two-thirds of the value of any given web vulnerabilities assessment comes from the use of automated web vulnerability scanners. At least that’s been my experience. I certainly don’t have the knowledge – or the time – to manually track down every single flaw on…
Why Management Still Doesn’t Get Web Security
Having worked in IT for nearly two and a half decades, I’ve certainly seen my share of blame and abuse thrown the way of IT. Whether the network is down or the application is unavailable, people immediately assume that whatever IT did broke it, even…
Top 5 Information Security Trends in 2013
It’s always tricky to write about “top trends” especially in information security given that things are always in a state of flux. Yet still I can’t help but think about several key areas that you and I must keep our eyes on as we move…
How Your Web Presence is Throwing You Out Of Compliance
Don’t you hate it when you’re chugging along, minding your own business, doing what you believe to be the right things in business then whammo, an oversight catches you off guard? Take, for instance, a compliance violation that comes up during a routine audit. The…
Free WordPress Security Plugin by Acunetix
Do you have a WordPress site? Are you concerned about your site’s security? Then make sure you download the completely free WordPress Security Plugin. Powered by Acunetix, the plugin is a free and comprehensive security tool that helps you secure your WordPress installation and suggests…