Department of Defence and other investigators, are investigating two U.S. Army web server breaches which were never publicly disclosed. On 19th September 2007, and 26th January 2008, a Turkish hacker group known as “m0sted” successfully probed 2 U.S. Army web servers, by running a SQL…
Author Archives Invicti
THE AUTHOR
Invicti
New Invicti WVS Version 6.5 sets new standards in web vulnerability scanning
We are proud to announce the launch of Invicti Web Vulnerability Scanner Version 6.5. With this new version, we introduced the new âfile upload forms vulnerability checksâ. Invicti is the industry’s first and only Web Vulnerability Scanner to scan web applications for this type of…
New Invicti WVS 6.5 sets new standards in web vulnerability scanning
Unique Invicti WVS vulnerability checks save businesses time, money and embarrassment London 20th May 2009 – Invicti (www.acunetix.com), a pioneer in web application security scanning technology, has announced new âfile upload forms vulnerability checksâ in version 6.5, an industry first and only Web Vulnerability Scanner…
Implementing a web application firewall is not enough to secure web applications
As demonstrated during an OWASP Europe 2009 presentation, WAFs (web application firewalls) also have vulnerabilities. Sandro Gauci (founder and CSO for EnableSecurity) and Wendel Henrique (member of SpiderLabs) showed how an attacker can easily identify and bypass several well known web application firewalls using XSS…
Invicti WVS Version 6.5 BETA is available for download
Invicti is proud to announce the launch of the BETA version of the upcoming Invicti WVS Version 6.5. With this latest version, Acuntix is launching a new set of checks which check for vulnerabilities in file upload forms. To date, Invicti WVS Version 6.5 is…
Learning from other’s mistakes: Twitter Security
Unless you have been sleeping under a stone for the past four years then you must have heard about Twitter in some way or another. The original idea behind Twitter was to provide a social network where everyone can tell followers what he or she…
VIDEO: Meeting PCI DSS requirements with Invicti
Unlike web application firewalls, Invicti Web Vulnerability Scanner focuses on fixing web security problems, whether than preventing them from happening. Invicti WVS helps in detecting cross site scripting, sql injections and other web vulnerabilities before the web application is exposed on the internet, during its…
OpenX 2.6.4 vulnerabilities were identified with Acusensor
If you are making use of OpenX, the following update fixes a number of security flaws that were identified when we made use of Invicti WVS with the Acusensor technology enabled. Released an advisory detailing these vulnerabilities here. The SQL injection vulnerabilities abuse an INSERT…
When Google claims that "This site may harm your computer"
This warning does not refer to this particular site (Invicti.com) but to quite a few websites out there. This is a notice that will show up when a Google search lists websites that are flagged as dangerous. Google’s search engine works together with StopBadware.org to…