web application security

Akamai and Trustwave unite to protect businesses from online threats

June 2, 2015

Akamai Technologies, provider of content delivery network services, and managed security services firm Trustwave announced at Infosecurity Europe 2015 a new strategic alliance …

Companies stay vulnerable to web attacks for far too long

May 21, 2015

While no true security best practices exist, the key is in identifying the security metrics that mean the most to the organization and focusing on those activities to …

DDoS attacks double, old web application attack vectors still active

May 20, 2015

Akamai Technologies analyzed thousands of DDoS attacks as well as nearly millions of web application attack triggers across the Akamai Edge network.A surge in DDoS attack …

Millions of WordPress sites risk hijacking due to flaw in default theme

May 7, 2015

Guess what? Unless your site is hosted by one of 11 specific web hosts, it’s time to patch your WordPress installation again! Netsparker researchers have recently …

Qualys takes step towards complete automation of web app security

April 21, 2015

Qualys announced Qualys Web Application Firewall (WAF) version 2.0 that comes fully integrated with the Qualys Web Application Scanning solution (WAS). Presented at RSA …

Radware launches hybrid cloud based WAF service

April 20, 2015

Cyber attacks remain a persistent threat and have become sophisticated in size and scope. DoS, SQL injections and cross-site scripting are the most common web attack vectors, …

Main sources of data breaches: Phishing, RAM scrapers, web app insecurity

April 14, 2015

US telecom giant Verizon has published its 2015 Data Breach Investigations Report, which is based on an analysis of nearly 80,000 security incidents, including more than 2,100 …

False positive free online web application security scanner from Netsparker

March 12, 2015

Netsparker launched their new enterprise online service offering Netsparker Cloud, which enables organizations to simultaneously scan hundreds and thousands of websites for …

Over a million WP sites at risk of hijacking due to plugin bug

February 25, 2015

Users who run their websites on the popular WordPress CMS and are also using the WP-Slimstat web analytics plugin should update as soon as possible, warns Sucuri vulnerability …

New DDoS attack and tools use Google Maps plugin as proxy

February 25, 2015

Attackers are using Joomla servers with a vulnerable Google Maps plugin installed as a platform for launching DDoS attacks. A known vulnerability in a Google Maps plugin for …

Google’s new Cloud Security Scanner detects common security bugs

February 20, 2015

Here’s some good news for Google App Engine developers: Google has released a new application security scanner that’s especially fitting to test new app builds for …

SQL injection vulnerabilities surge to highest levels in three years

January 20, 2015

UPDATE: Tuesday, 20 January 2015, 1:10 PT – Jericho from Attrition.org has written an insightful post that essentially debunks the data released by DB Networks. …