• Prev. page
• 2
• 3
• 4
• Next page

• Penetration testers need to advance their skills

  09.10.2012

  Ahead of SANS London 2012, Europe’s largest IT security training event, a top security expert and trainer is warning that a big challenge and knowledge gap for penetration testers is the growth of operating systems that include new anti-exploitation defences, “Although developers and operators still make coding and configuration mistakes, discovering or adapting an exploit to handle modern-day defences is more difficult than ever,” comments Stephen Sims, the author of SANS' only 700-level course, SEC710: Advanced Exploit Development.

• CORE Security updates its vulnerability assessment software

  18.09.2012

  CORE Security released the latest version of CORE Impact Professional vulnerability assessment and penetration testing software, that allows organizations to proactively test IT infrastructure.

• BackTrack 5 R3 released

  14.08.2012

  BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated to hacking.

• Facebook invites white hats to attack its corporate network

  27.07.2012

  Nearly a year ago, Facebook introduced its bug bounty program, inviting security researchers to poke around the site, discover vulnerabilities that could compromise the integrity or privacy of Facebook user data, and then responsibly disclose them to the company.

• Penetration testing tool masquerades as surge protector

  23.07.2012

  In the same way that a hardware keylogger may remain undetected by office workers, Power Pwn - a newly created piece of hardware resembling a power strip or surge protector that is actually a network-snooping device - might pass unnoticed until it's too late.

• Prev. page
• 2
• 3
• 4
• Next page

Spotlight

The security of WordPress plugins

Posted on 18 June 2013.  |  Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers

Posted on 17 June 2013.  |  George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?

Posted on 14 June 2013.  |  Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud

Posted on 12 June 2013.  |  nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal

Posted on 11 June 2013.  |  Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.