11 News Story Topics

Remove Filter
Member Avatar for
Member Avatar for happygeek

The second annual Imperva Hacker Intelligence Initiative report, this one entitled [Monitoring Hacker Forums](http://www.imperva.com/docs/HII_Monitoring_Hacker_Forums_2012.pdf), is out and reveals that the threat surfaces being discussed by the hacker community are very different from those that businesses are spending money on defending against attack. ![dweb-hackers](/attachments/small/0/dweb-hackers.jpg "align-right") The Imperva research analysed the content …

Member Avatar for Shankar.Shiv
0
937
Member Avatar for happygeek

You may be wondering what a superfecta actually is, and the answer is: the most dangerous and serious threat to business. To clarify, the superfecta as defined by secure cloud hosting outfit FireHost is a group of four attack vectors that comprises of Cross-Site Request Forgery (CSRF), Cross-Site Scripting (XSS), …

Member Avatar for sanimirza
3
439
Member Avatar for happygeek

A Drupal security advisory, [SA-CORE-2014-005](https://www.drupal.org/SA-CORE-2014-005), rather embarrassingly states that: > Drupal 7 includes a database abstraction API to ensure that queries executed against the database are sanitized to prevent SQL injection attacks. A vulnerability in this API allows an attacker to send specially crafted requests resulting in arbitrary SQL execution. …

2
346
Member Avatar for happygeek

A report from Hold Security claims that one of the biggest ever online heists has been committed by a Russian crime gang. It would appear that the data theft includes, wait for it, no less than 1.2 billion (yes billion) username and passwords along with around half a billion email …

Member Avatar for F-3000
2
349
Member Avatar for happygeek

According to the fourth annual [Web Application Attack Report](http://www.imperva.com/download.asp?id=419) from Imperva retailers suffer from twice as many SQL injection attacks when compared to other industry sectors. What's more, the United States remains the number one source of all web attacks. Other key findings of the report include the startling revelation …

Member Avatar for LastMitch
3
330
Member Avatar for happygeek

[attach=right]14422[/attach]File under oops. The website of The Telegraph newspaper has been defaced by hackers, apparently upset at a cult British television show and the newspaper itself for mocking their country. The 'Romania National Security' hacking group has claimed responsibility for the attack which hit a couple of third party services …

Member Avatar for hugoboss1
1
269
Member Avatar for happygeek

File under FAIL: social network widget maker RockYou has fallen victim to a SQL injection flaw and as a result some 32.6 million users are being urged to change their passwords as a matter of urgency. Security specialists Imperva discovered the problem at social networking development site Rockyou.com and issued …

Member Avatar for Alex_
1
825
Member Avatar for newsguy

It has been a long time coming, but Microsoft has finally announced the release to manufacturing of SQL Server 2008. "Microsoft developed this release of SQL Server with the customer in mind," said Ted Kummert, corporate vice president of the Data and Storage Platform Division at Microsoft. "SQL Server 2008 …

0
202
Member Avatar for newsguy

That, my friends, is the message being touted by the latest Security Threat report to emerge from [URL="http://www.sophos.com"]Sophos[/URL] which says that one web page was infected every five seconds (count them) during the first half of 2008. Last year it was only, and I feel bad enough saying only, one …

0
201
Member Avatar for happygeek

It’s that time of the year again, and the Microsoft Tech.Ed Developers Conference 2006 Europe has hit the beautiful city of Barcelona, capital city of Catalonia in Spain. Hot off the press news for today is the keynote speech by Eric Rudder, senior vice president of technical strategy with Microsoft. …

0
161
Member Avatar for happygeek

According to Oxford, UK based database security specialists [URL="http://www.secerno.com/"]Secerno [/URL]databases are open to attack from growing insider threats that give employees carte blanche to access confidential data. Naturally, the company has a product to plug, a database assurance platform called Secerno.SQL, but to be honest I am more interested in …

Member Avatar for happygeek
0
263

The End.