Windows 10 due to support SSH As you should now have heard, or as you might notice from the new little Windows icon on your taskbar, Windows 10 is due to be released at the end of July. The most interesting bit of news from…
Author Archives Invicti
THE AUTHOR
Invicti
ASD Strategies to Mitigate Targeted Cyber Intrusions
In Australia, the government provides formal guidance regarding cyber security in the form of the âStrategies to Mitigate Targeted Cyber Intrusionsâ document, issued by the Department of Defence. This ties with the statutory information security compliance which anyone handling Australian Government data is subject to….
UK 2015 information security breaches survey
The UK 2015 information security breaches survey has just been published, showing as anticipated that just about every aspect of security breaches is on the increase. A staggering 90% of large organisations surveyed admitted to having experienced at least one breach within the last year,…
The What, Why and How of Wassenaar
If you work in the realm of cyber security and monitor its goings-on then you will probably have come across this hashtag lately; #wassenaar. Here weâre going to explain whatâs happening, what exactly it means and how it might affect you. Wassenaar is the name…
In the headlines: mSpy, Friend Finder and more
mSpy surveillance service hacked In a somewhat ironic turn of events, mSpy, a provider of software allowing people to track others such as their children or spouses, has admitted to suffering a data breach. The news emerged through the Krebs on Security blog by security…
What the Verizon Report 2015 tells us about web app attacks
Verizonâs annual report, now in its eighth year, analyzes breach intelligence and data from multiple sources, including customers of Verizonâs forensics response division and customers of FireEye, the firm that investigated the recent hack of Sony Pictures Entertainment. It also examines data from cases investigated…
WordPress 4.2.1 Security Release addresses yet another XSS vulnerability
Yesterday, WordPress announced another security release, urging all users to update all WordPress installations immediately. WordPress Security Release 4.2.1Â fixes yet another Stored Cross Site Scripting (XSS) vulnerability, which allows an unauthenticated user to inject JavaScript in WordPress comments. The injected script can be affect both…
Invicti helps Sendy discover and remediate their vulnerabilities
âInvicti allowed us to identify some major vulnerabilities before hackers were able to exploit them. This has made Sendy a far more secure application and hugely reduced the risk of us being breached.â Ben Ho, Developer, Sendy Sendy is a self hosted email newsletter application…
PCI Security Council presses companies to switch to TLS
The PCI Security Council recently confirmed that the upcoming update to the PCI DSS guidelines, version 3.1 will include a change pressing companies to switch to TLS web encryption as opposed to the outdated SSL. This is mainly a response to Heartbleed, ShellShock and POODLE,…