Invicti will be exhibiting at it-sa for the second year running, in partnership with VOQUZ. it-sa is the only IT security exhibition in the German-speaking region and one of the most important worldwide events. Whether cloud computing, IT forensics, data security or hosting, the exhibition…
Invicti to exhibit at New York Metro Joint Cyber Security Conference
Invicti together with partners Winmill Software will be exhibiting at the 3rd annual New York Metro Joint Cyber Security Conference to be held on the 5th October 2016 at 11 Times Square, New York City, USA. The event is a collaborative event of leading professional associations in…
Invicti to exhibit at Appsec USA 2016
Invicti together with Winmill Software will be exhibiting at Appsec USA 2016 to be held on the 13th and 14th October 2016, in Washington DC, USA. OWASPâs 13th Annual AppSecUSA Security Conference is the premier application security conference for developers and security experts. Visitors can…
33% of websites and webapps are vulnerable to XSS
Cross-site Scripting (XSS) is a much talked-about type of injection vulnerability that occurs on the client-side (that is, in a userâs browser). It occurs, predominantly through the use of JavaScript due to its prevalence in most browsing experiences. Cross-site Scripting can be classified into four…
SQL injection slowly receding, but still a major concern
SQL injection (SQLi) is a frequent topic on this blog – it refers to an injection attack that allows an attacker to execute malicious SQL statements that allow the attacker to control a web applicationâs database server. Since an SQL injection vulnerability could possibly affect…
Second Web App Security Report by Invicti shows 55% of websites have severe vulnerabilities (& rising)
Vulnerabilities grow by 9% in past 12 months as companies demand faster application release cycles London, UK – August 2016 – Invicti, the pioneer in automated web application security software, announces its annual Web App Security Report 2016. Statistics reveal that high-severity vulnerabilities are on…
In the headlines: US Department of Energy, IBM census site, NSA cyber defense hack, Sage data breach and more
US Department of Energy invests $34m in cybersecurity The Department of Energy in the US is set to invest $34m in 12 individual projects aimed to secure the smart grid. The projects are described as being aimed to improve the âreliability and resilienceâ of US…
Drupal Ransomware Vulnerability Attacks – Rex
For the past few months, multiple reports regarding a ransomware primarily affecting the popular CMS, Drupal have been emerging. The ransomware itself has no official name however is currently being dubbed as Rex. In May 2016, it was reported that 400 Drupal installations were affected, and…
Pentest Diaries: Negative Transfers and Android eWallets donât Mix
eWallets, or digital wallets are becoming evermore popular. Most Android eWallets are apps that allow a user to make electronic transactions, including purchasing items online or in-person. Some services even allow an individual’s bank account to be linked to the service. Naturally, breaking the security…