Back in September, eBay made the headlines due to a number of Cross Site Scripting (XSS) vulnerabilities found on their site. Following pressure from security experts and users, a few of these vulnerabilities were patched, although eBay were quoted as saying they would not remove…
Author Archives Invicti
THE AUTHOR
Invicti
Invicti represented at OWASP Germany
On the 9th of December the OWASP Germany conference was held in Hamburg, Germany. Invicti partners Voquz were in attendance to discuss with visitors how Invicti can help to protect against the OWASP top 10 vulnerabilities and others. The Open Web Application Security Project (OWASP) is…
US Security firm speculates Iran could be behind worrying cyber attacks
This week a shocking campaign of cyber attacks has been made public by Cylance, a US cybersecurity firm. The report has been released earlier than planned due to the level of risk these attacks pose, in the hope that it might prevent further breaches. This…
Top tips for a secure web server
Powering over 90% of the world wide web, Apache, IIS and nginx are considered the 3 most important web servers. They are considered to be easy to get up and running, have an active development team behind them and react quickly to security issues. Most…
HIPAA – Why you need to keep patient information secure
If you’re a healthcare entity in the United States, then you’ll certainly be familiar with HIPAA. Enacted by congress in 1996, HIPAA addresses the security and privacy of health data among a number of other items. The most important aspect for healthcare providers, insurers and…
nginx security: Tips to harden your configuration; part 2
This is the second part in the series on nginx security. This article follows on from Part 1 with more tips on hardening your nginx server configuration. 5. Make use of ModSecurity ModSecurity is an open-source module that works as a web application firewall. Different functionalities include…
Are you prepared for PCI v3.0?
At the end of December 2014 the new set of Payment Card Industry Data Security Standards (PCI DSS) will come largely into force, with just a few small elements having the later deadline of July 2015 to allow businesses time to adapt. If your company…
Analysing the latest trends in web application attacks
A recent study by a leading web application security vendor has highlighted some interesting statistics about web application attacks. Some of the findings examined below should enable web security practitioners to better anticipate, identify and act against cyber threats. Threat Growth One of the unsurprising…
Invicti OVS Update, Spots Vulnerabilities with Military Precision
An important update has just been rolled out to Invicti Online Vulnerability Scanner (OVS) which includes 2 features unique to Invicti – AcuSensor and AcuMonitor. Both technologies have been successfully used in Invicti WVS to enhance scan results by improving vulnerability detection and detecting difficult…