As you might expect, there is a projected large increase in criminal activities forecasted for this year. Driving malware and trojan infections via YOUR website is now becoming more of a standard operating procedure than ever. As reported in ThreatPosts more recent listing: ‘Spammers Gearing…
Acunetix WVS Version 7 build 20101028 released
An updated build of Acunetix WVS Version 7 has been released. This build addresses a number of bug fixes. Bug Fixes: Fixed: Replay of recorded login sequences was not working properly in the free version Fixed: NTLM authentication was not working properly when using specific…
Preventing phishing attacks is not just a technical issue
A client of mine who’s a security administrator for a business in the financial industry contacted me recently about some odd behavior he was seeing on his network. Apparently numerous spidering/mirroring requests were being sent to his company’s marketing website from a foreign country –…
Internet Voting Trial Thwarted by Hackers
The District of Columbia recently attempted to give the opportunity to number of people who live or work overseas to be able to cast their vote remotely. To do this a secure E-Voting website costing over $300,000 was built. On Tuesday, September 28 2010 the first public trial run was launched. Thirty-six hours later the voting system was hacked by a student. It took nearly three days for D.C officials to realize that their system was compromised. The trial was immediately suspended and red-faced engineers and politicians quickly scrambled to find out how this breach could possibly have happened.
Four skills that will make you a better Web security professional
People who are at the top of their games such as Formula One engineers, neurosurgeons, stunt pilots and so on have one thing in common: they all have finely-tuned technical skills. This is not just specific knowledge of what they do but knowledge about many…
Acunetix WVS Version7 build 20101012 released
An updated build of Acunetix WVS Version 7 has been released. It includes two bug fixes. Bug fixes: Fixed: Client Script Analyser engine was blocking if insertAdjacentHTML used on an element without parent Fixed: “Accept” header was not sent by the advanced penetration testing tools,…
Drive By Malware: What does my website look like to my customers?
As depicted below, you may be presenting an excellent, professional and polished image. However, as your customers are ‘browsing’ the scary stuff is happening behind your and their backs! The virus attacks their desktop, depositing its nastiness and spreading from there. This happens for all…
What does being Banned by Google mean to me?
Many customers ask me, “so what’s the big deal about this Google banning thing?”. As I try and explain Google’s algorithms, the lovely joy of begging to be allowed back into their (Google’s) good graces and the challenges of ensuring continued ‘cleanliness’, I feel sometimes…
Why all the hoopla over the Twitter onMouseOver flaw?
The recent publicity and ranting about Twitter’s onMouseOver flaw* got me thinking about our perception of software quality and expectations of risk. Why is there no room for error when Twitter makes a mistake yet we put up with so many bigger – and more…