2008
Dec 2008 :
- Web Site Application Security Testing Still Surprisingly Neglected
- SMBs No Longer Need to Wait on Whitelisting
- Five predictions for Web security trends and changes in 2009
- Cybercrime: The 2009 megathreat
- Cisco: Cyberattacks growing, looking more legit
- Botnet master sees himself as next Bill Gates
Nov 2008 :
- 'Ruthless' Trojan horse steals 500k bank, credit card log-ons
- College of Dentistry at UF breached
- Hosting firm takedown bags 500,000 bots
- Thousands hit in broad Web hack
- Malware Epidemic Demands a United Front
Oct 2008 :
- Georgian cyberattacks suggest Russian involvement, say researchers
- Data Breaches Reach Record High
- Report: World Bank servers breached repeatedly
- Americans Confused as Ever over Cyber-security
Sept 2008 :
- Researcher finds evidence of massive site compromise
- Antivirus Vendors Push Toward Cloud Computing
- Security Vendors Have Their Heads in the Clouds
- Java theory and practice: Are all stateful Web applications broken?
- Top 20 practical software testing tips you should read before testing any application
- CSRF Flaws Found on Major Websites
- Acting upon a security breach in six easy steps
- BusinessWeek site attacked, turned into malware playground
- Social Security numbers exposed on Iowa Web site
- Forever 21 says nearly 99,000 cards compromised in data thefts
- Website security improved, but more can be done
- 530M records exposed, and counting
- Social Security numbers exposed on Iowa land-records Web site
- Website security improved, but more can be done
- Web Application Security Statistics
- Careful Coding Remains the Key to Web App Security
- Report: Popular Web Attacks Go Stealth
- Hackers target Government websites with computer virus
- computer virus infects key government and consumer websites
- WhiteHat Report Finds Web Site Security Vulnerabilities Persist
- SEO Code Injection Search Engine Optimization Poisoning
- Cross-site hacks and the art of self defence
August 2008 :
- A-Z: The computer hacker behind a cybercrime wave
- 6 Simple principles of secure website design
- Terror threat system crippled by technical flaws, says Congress
- Cyber-attacks Gaining Acceptance as Another Weapon in War
- Study of Stolen Identity Use Patterns Offers Surprises
- 10 Notorious Cyber Gangs
- Changes to PCI standard not expected to up ante on protecting payment card data
- Brazilian charged in botnet scheme, will be extradited to U.S
- Russian hacker 'militia' mobilizes to attack Georgia
- Business logic flaws endanger websites
- Majority of Web users share personal data online
- Data Thefts Show Need for Comprehensive Security
- SQL Injection Attacks on the Rise
- Cyberattacks knock out Georgia's Internet presence
- Can you tell a good URL from a bad one?
July 2008 :
- organisations resemble the Mafia
- Stolen bank data gets cheaper on Web: report
- Business hacks reap money from e-commerce sites
- Financial Site Security Research Weak On Methodology and Timeliness
- McAfee: Many SMBs unprepared for online security threats, Survey shows small and midsize companies oftendownplay risk of attacks, vendor says
- Hot or not: Web application firewalls for security and regulatory compliance Amol Sarwate
- Security Not a Matter of Black or White
- Industry View: Web Application Security Today - Are We All Insane?
- Larry David and Web Application Firewalls
- Web firewalls trumping other options as PCI deadline nears
- Design flaws impair security at banking sites, It isn't just ugly that hurts
- Small firms naïve about security, SMBs remain prone to attack, says study
- Finjan outlines the latest developments in the cybercrime commercialization economy
- Texas Bank Dumps Antivirus for Whitelisting
- More Europeans believe they are likely to experience cybercrime than burglary, assault or robbery
- Web Security Report Outlines Structure of Cybercrime Gangs
- Major sites fall victim to Web hijack; check yours We show you how (but you have to be careful)
- Georgia president's Web site falls under DDOS attack Botnet took down site for one day
- Compliance, New Threats Drive Security Spending
- Joel Durham Jr. Identity Theft: Trust No One
- Industry View: Web Application Security Today - Are We All Insane?
- Lithuania: Attacks focused on hosting company
- Citibank debit card fraud highlights ATM vulnerabilities
- Movies describing XSS (2 scenarios), XSRF and Forceful Browsing
June 2008 :
- Major security sites hit by cross-site scripting bugs
- Coming: A Change in Tactics in Malware Battle
- PCI deadline looms, but standard still packs little punch
- The realities of using WAFs for PCI DSS 6.6 compliance
- Major security sites hit by cross-site scripting bugs
- The realities of PCI DSS 6.6 application code reviews
- China denies hacking congressional computers
- Major security sites hit by cross-site scripting bugs
- Spear-phishing attacks have hooked 15,000, says Verisign
- UnitedHealthcare data breach leads to ID theft
- Amazon.com's US site KO'd !
- Most data breaches discovered too late, study says, Many companies only learn of breaches when notified by third party
- Web threats, compromised websites skyrocket
- Report: Cyberspace Becoming More Malicious
- Three Steps to Web Application Safety
May 2008 :
- Hired gun blamed for business outage
- New Google Service Helps Infected Websites Clean Up Diagnostic page details nature of sites flagged as dangerous by Google
- HIPS, HIPS, Hooray! Brian O’Higgins
- McAfee, Inc. Names Most Dangerous Domains to Surf and Search on the Web
- Update : Hackers hit Mars lander's Web site
- Two weeks, two security breaches in web 2.0 applications
- Rent-a-botnet makes cyber crime a breeze
- Few expected to make June 30 PCI deadline for Web application security
- Botnet Installs SQL Injection Tool
- Mass SQL injection attack hits Chinese Web sites, The attack has implanted malware on thousands of Web sites
- SQL Injection Attack Helps Hack OS
- Restaurant chain served up payment card data to hackers
- Hacker posts Chilean government data on 6 million
- Srizbi grows into world's largest botnet
- Non-tech criminals can now 'rent a botnet'
- Phishing botnet expands by hacking legit sites
- 5 ways insiders exploit your network
- DDoS attacks knock Radio Free Europe off the Web
- Bit9: Fighting malware with a white list Elinor Mills
- What a Botnet Looks Like
- Web attack worm on a rampage
April 2008 :
- Expert Advice for Securing Your Site and Your Reputation
- Eight Top Security Concerns - The Web : Concern Numero Uno
- Web Attacks on the Rise ; E-mail Attacks Decline
- PCI Council issues clarification on Web application security
- Microsoft data show Web attacks taking off
- China faced with severe botnet problem
- Huge Web hack attack infects 500,000 pages
- Microsoft: Massive site attacks not our fault
- New Crimeware-as-a-Service Market Thriving
- Researchers uncover tool used to infect websites, spread malware
- The United Nations Serving Malware
- New SQL injection technique threatens Oracle databases
- 'Provider-in-the-Middle Attacks' Put Major Websites, Users at Risk
- Protection Required Against Massive Web Attack
- Head of PCI council sees security standard as solid, despite breaches
- Payment industry receives first version of application security standard
- Hackers jack thousands of sites, including U.N. domains
- After Web defacement, university warns of data breach
- Spammers ramp up siege on Google's Blogger via bots
- China worries hackers will strike during Beijing Olympics
- Can we please stop cross-site scripting attacks ?
- China continues to face severe botnet problem
- CNN site hit by China attack
- Hannaford to spend 'millions' on IT security upgrades after breach
- Botnets Declared a National Security Threat
- The future of antivirus Is there a way out of the arms race ?
- Hackers open new front in payment card data thefts Hackers open new front in payment card data thefts
- New attack kit targets bag of ActiveX bugs
- Top botnets control 1M hijacked computers, They can dump more than 100B spam messages on users daily
- Security Manager's Journal: Confronting the application layer
March 2008 :
- The Virtualization Challenge, Part 5 : Virtualization and Security
- Cyber Storm 2 exercise reveals security preparedness
- Turning up the Security Learning Curve, With Bill Pennington, vice president of services
- IBM's Watchfire halts network research, focuses on Web apps
- DoS: No One is Safe
- Damn Dirty DoS Attacks
- Hackers launch massive IFrame attack, Search-cache subversion infects 400,000 pages, traced to RBN
- Methodologies of the RBN
- Russian Business Network : On the Fly
- Report: 9 of 10 Sites Are Sitting Ducks
- Top 10 Security Trends for 2008
- FBI looks at Chinese role in Darfur site hack
- Password-stealing hackers infect thousands of Web pages
- Top cybercrook targets for 2008, CIO Canada staff
- Moving to Software as a Service - Questions to Ask, Larry Port
- U.S. military flags China cyber threat
- d supermarket chain reports data theft
- Website Security Strategies that Work
- Teen masterminded mega-botnet
- 100% secure websites
- Web 2.0 Brings Increased Array of Threats
- Growth of Anti-Botnet Startups Points to AV Deficiencies
February 2008 :
- Statistics The Web Hacking Incident Database annual report 2007, webappsec.org
- Online Banking Grows, But Security Concerns Continue to Accrue, Carl Weinschenk, itbusinessedge.com
- Finjan uncovers database storing more than 8,700 stolen FTP credentials, Data enables cybercriminals to upload malware to compromised systems more easily
- 103,000 doctors info exposed
- Breach Security Labs Publishes Report on Significant Web Hacking Incidents in 2007
- WHID 2008-10: Chinese hacker steals user information on 18 MILLION online shoppers at Auction.co.kr
- The Ghost In The Browser, Analysis of Web-based Malware
- Hackers camouflage 100% of Web attacks, IBM researcher says
- Google finds evil all over the Web
- Harvard Web site hacked, database on file-sharing site
- Attacks on health care organizations up 85 percent
- XSS explained with simple words
- The future of network security
- Storm worm dethroned by sex botnet
January 2008 :
- Cyber espionage seen as growing threat to business, government
- Threats From Everywhere in 'Cyber Storm'
- The Drive-by Download Menace
- Davidson Companies Reports Data Breach Affecting 226,000 Clients
- Storm botnet at one year: Unlikely to go away soon
- Cybercrooks get even more crafty, sophisticated
- Bots Follow the Money
- Drive-by download menace spreading fast, 6000 new webpages infected every day
- Let's talk Web Application Firewalls (WAFs)
- Most malware comes from legit sites, says researcher
- CIA Confirms Cyber Attack Caused Multi-City Power Outage
- 'Hacker Safe' seal: Web site shield, or target?
- Trailer: The New Face of Cybercrime
- Web application hacking: Inside the mind of an attacker
- 'White hat' hackers in demand
- Web 2.0 and Application Security
- In the World of Botnets, Three Isn’t a Charm
- New mass hack strikes sites, confounds researchers
- Protecting Your Enterprise from the Thriving Cyber Underground
- Mass hack infects tens of thousands of sites
- Data Loss Archive and Database (DLDOS)
- The World of Identity Theft Continues to Evolve, ITRC reports on the identity theft trends of 2007 with 2008 predictions
- Anti-botnet vendors plug in