It is October again, and that means that it is a better time than ever to set aside some time to gather the relevant troops inside your organization to evaluate your information security posture – because October is National Cyber Security Awareness Month! Since its…
In the headlines: Flash and Chrome patches, Dridex botnet, WP Akismet and more
Flash Zero Day receives emergency patch Poor old Flash is in the headlines again, and this time for a zero-day flaw which is being actively exploited. Reported by a researcher and the Google Zero Day project, no details of the vulnerability have been disclosed but…
Gartner recognizes Acunetix as a Challenger for Application Security Testing in 2015
Acunetix Receives 2nd highest product score for Manual Web Penetration Testing in Gartner’s 2015 Critical Capabilities for Application Security Testing Report Gartner, Inc., the leading provider of research and analysis on the global information technology industry, has recognised Acunetix as a challenger, assigning Acunetix Web…
SQLi part 2: What’s the worst an attacker can do with SQL?
SQL is a programming language designed for managing data stored in an RDBMS, therefore SQL can be used to access, modify and delete data. Furthermore, in specific cases, an RDBMS could also run commands on the operating system from an SQL statement. LEARN MORE: SQL…
The 2015 Cost of Data Breach analysis by Ponemon Institute
A joint report analysing the cost of data breaches has been released by IBM and Ponemon Institute. Having surveyed 350 companies globally, they’ve found that the average cost of a data breach is increasing, having gone from $3.52m in 2014 to $3.79m in 2015. The…
In the headlines: David Jones and T-Mobile hack, remote code execution bugs, WinRAR vulnerability, and more
Australian department store David Jones victim of hack Australian department store giant David Jones has informed customers through a notice on their site, that they were recently hacked. However, they also assured account holders that no financial data had been breached and that there was…
SQLi – How it works (Part 1)
In this 6 part series on SQLi (SQL Injection) we shall be describing the vulnerability and its variants, showing how it works and what an attacker can do with it. SQL injection (SQLi) refers to an injection attack wherein an attacker can execute malicious SQL…
South African cyber crimes bill released, includes 25 year sentencing
South Africa is the latest country taking measures to tighten up on cyber crime. In the draft of their Cybercrimes and Cyber Security bill, are included explicit penalties for cyber crimes, ranging from fines to a maximum of 25 years in prison. The draft includes…
In the headlines: South Korea’s cyber attacks, DHS networks, Adobe Shockwave Player and more
South Korea has had over 110,000 cyber attacks in the last 5 years A recently released report has revealed that South Korean government agencies were subject to over 114,000 cyber attacks in the last five years. The report, compiled using data from the National Computing…