Gartner’s 2017 Critical Capabilities for Application Security Testing Report Gartner, Inc., the leading provider of research and analysis on the global information technology industry, has recognised Invicti as a Challenger in February 2017 Magic Quadrant for Application Security Testing (AST), and has given Invicti the…
Invicti Jenkins Plugin provides DevOps with on the spot identification of web vulnerabilities
Continuous Integration is a software development practice which involves the frequent merging, or integration of work from different developers on a team. Not only does CI help eliminate tedious and error-prone work, but it also reduces the chance of bugs â including web vulnerabilities. With…
Start using Invicti v11 with Invicti Quick Start Guide
The Invicti Quick Start Guide Video is a short guide covering basic steps to get you started using Invicti v11. Learn how to launch a scan, analyze the scan results and create a report. Find your way around the new web-based user interface re-engineered from…
Watch Whatâs New in Invicti v11
Hot on the release of Invicti v11, check out what’s NEW in this brief presentation highlighting: AÂ brand new web interface re-engineered from the ground up for greater usability and manageability New integrated vulnerability management features to prioritize and manage vulnerabilities Multi-user, Multi-role features Issue tracker…
In the headlines: DNC email breach, Avtech IoT devices, UN nuclear power plant hack, and more
US accuses Russia of interfering with elections In what could be the most highly publicized nation state cyber attacks since the Sony Pictures hack, the US have officially accused Russia of interfering with the elections. The DNC email breach was the first stage in a…
In the headlines: Yahoo hack, Krebs DDoS attack, Drupal vulnerabilities and more
500m users affected in giant Yahoo hack and lawsuits already filed The latest breach to be dubbed âthe biggest breach everâ is the newly revealed theft of the data 500 million Yahoo users, which took place in 2014. Yahoo admitted this news just last week,…
33% of websites and webapps are vulnerable to XSS
Cross-site Scripting (XSS) is a much talked-about type of injection vulnerability that occurs on the client-side (that is, in a userâs browser). It occurs, predominantly through the use of JavaScript due to its prevalence in most browsing experiences. Cross-site Scripting can be classified into four…
SQL injection slowly receding, but still a major concern
SQL injection (SQLi) is a frequent topic on this blog – it refers to an injection attack that allows an attacker to execute malicious SQL statements that allow the attacker to control a web applicationâs database server. Since an SQL injection vulnerability could possibly affect…
In the headlines: US Department of Energy, IBM census site, NSA cyber defense hack, Sage data breach and more
US Department of Energy invests $34m in cybersecurity The Department of Energy in the US is set to invest $34m in 12 individual projects aimed to secure the smart grid. The projects are described as being aimed to improve the âreliability and resilienceâ of US…