After the long-winding road of discussion and deliberation, revision, disagreements and adjustments, the Open Web Application Security Project (OWASP) are updating their venerable Top 10 list of the most critical web application security risks since 2013. This update brings with it three new entries to…
Author Archives Invicti
THE AUTHOR
Invicti
How do I update to the latest Invicti build?
Keeping Invicti up-to-date is important to ensure you always get the latest updates to existing and newly added tests, features, bugfixes and improvements. Fortunately it’s not only easy but transparent. By default Invicti automatically checks for updates, installs any new updates in the background without…
How to Backup Invicti
Backing-up your Invicti data and settings is important and should be done frequently, especially on production systems. This post will show how to do this manually and will also offer a sample implementation in PowerShell for automating the process. Stopping Invicti services Before taking a…
Getting Started with the Invicti Blind SQL Injector
The Blind SQL Injector is a tool that forms part of the Invicti Manual Pen Testing Tools suite (available to download for free). The Blind SQL Injector allows you to enumerate MySQL and MSSQL databases via a Blind SQL injection vulnerability. You can start using…
In the headlines: Yahoo hack, Krebs DDoS attack, Drupal vulnerabilities and more
500m users affected in giant Yahoo hack and lawsuits already filed The latest breach to be dubbed ‘the biggest breach ever’ is the newly revealed theft of the data 500 million Yahoo users, which took place in 2014. Yahoo admitted this news just last week,…
In the headlines: US Department of Energy, IBM census site, NSA cyber defense hack, Sage data breach and more
US Department of Energy invests $34m in cybersecurity The Department of Energy in the US is set to invest $34m in 12 individual projects aimed to secure the smart grid. The projects are described as being aimed to improve the ‘reliability and resilience’ of US…
In the headlines: LastPass vulnerability, Hillary Leaks, remote code execution vuln on Pornhub, and more
LastPass password manager vulnerability gives hackers your passwords LastPass is one of the most popular password managers around and can also be added to your browser, allowing you to store and auto fill all your passwords, using just one master password to access them. So…
EU Network and Information Security Directive sets legal requirement to report breaches
The EU have just passed a new directive, the Network and Information Security Directive, which was approved in December of 2015 and passed through last week. The directive comes into force in August of this year, with a 21 month limit to implement it, by…
Recent survey shows cost of a breach has climbed to $158 per record
A recently published report titled the ‘2016 Cost of Data Breach Study: Global Analysis’ has suggested that the average cost of a data breach continues to climb, now reaching an average of $4million per breach, or $158 per record from a survey of 383 companies…