47 matches found
Jeremiah Grossman on His New Role as CEO of WhiteHat Security
Dennis Fisher talks with Jeremiah Grossman, the new interim CEO of WhiteHat Security, about taking on the new role, how things have changed since he was CEO 10 years ago and what the biggest challenges will be. Image via @biatch0‘s Flickr photostream, Creative Commons...
[WhiteHat Aviator] The Web’s most secure and private browser
A few weeks have passed and we’ve had an overwhelmingly positive response from the community for the Aviator Beta. As you can probably expect, the vast majority of comments we received were around building a Windows version or a Linux version. But in the mean time, we wanted to make sure we...
Jeremiah Grossman on the Aviator Browser
Dennis Fisher talks with Jeremiah Grossman of WhiteHat Security about the company’s new Aviator browser, which employees have used for years, but the company just released as a public project. digitalunderground130.mp3...
How I Got Here: Jeremiah Grossman
Dennis Fisher talks with Jeremiah Grossman about his days cobbling together old x8s machines, designing Web sites in the heyday of the spinning GIF, becoming Yahoo’s first hacker and then founding WhiteHat Security. Download: 09grossman.mp3...
New Attack Leverages Mobile Ad Network to Deliver Android Malware
Ad networks have been a key component of the malware and cybercrime ecosystem for a long time and their role is becoming more and more complicated, as researchers from WhiteHat Security showed at Black Hat recently. That problem is now moving to the mobile Web, and researchers at Palo Alto Networ...
Vulnerability in Whatsapp messenger media server
If you own an iPhone or an Android device, then the chances are high that you're familiar with the extremely popular cross-platform messaging app, WhatsApp. According to a whitehat hacker Mohammed Saeed, Whatsapp media server media.whatsapp.com interface was vulnerable to Traversal local file...
Red Hat patches multiple web application Vulnerabilities
RED HAT has fixed multiple web application security issues that allowed hackers to extract website database using Blind SQL injection. Red Hat also confirmed a cross site scripting and Local File Inclusion Vulnerabilities on their website. Mohamed Ramadan Security Researcher and Trainer...
Red Hat patches multiple web application Vulnerabilities
RED HAT has fixed multiple web application security issues that allowed hackers to extract website database using Blind SQL injection. Red Hat also confirmed a cross site scripting and Local File Inclusion Vulnerabilities on their website. Mohamed Ramadan Security Researcher and Trainer...
Etsy for iPhone loophole allows attacker to hijack Accounts
Mohamed Ramadan from Attack-Secure discovered a critical vulnerability in Etsy's iPhone application. Etsy is a social commerce website focused on handmade or vintage items as well as art and craft supplies. Any attacker on the same network can sniff traffic including user password invisibly witho...
Etsy for iPhone loophole allows attacker to hijack Accounts
Mohamed Ramadan from Attack-Secure discovered a critical vulnerability in Etsy's iPhone application. Etsy is a social commerce website focused on handmade or vintage items as well as art and craft supplies. Any attacker on the same network can sniff traffic including user password invisibly witho...
Harvard Carr Center for Human Rights Policy Hacked, Password was "DOG" ?
Harvard's Carr Center for Human Rights Policy website www.hks.harvard.edu/cchrp/ was hacked last week and then silently fixed by the administrator without giving Reply/Credit to the Whitehat Hacker who reported the vulnerability. The Hack incident was performed in 3 Phases as described below: Pha...
Study: SQL Attacks Jump 69 Percent In Recent Months
The number of SQL attacks jumped by nearly two thirds earlier this year according to cloud hosting firm FireHost who recorded over 450,000 blocked SQL injection attacks between the first and second quarter this year. According to a report in ComputerWeekly, the firm claimed this week that it...
Report: Websites Getting Safer, Yet XSS Bugs Persist
The number of vulnerabilities in the average Web site is actually decreasing, one of the more surprising findings in an annual study done by WhiteHat Security. The 30-page report is the culmination of a project in which the firm combed through approximately 7,000 websites and discovered 79 seriou...
LulzSec & Anonymous initiates 'Operation Anti-Security' together
LulzSec & Anonymous initiates 'Operation Anti-Security' together LulzSec has issued a declaration virtual war on any government or governmental agency, the top priority of which they say "is to steal and leak any classified government information, including email spools and documentation...
Insecure Websites The Norm, Report Finds
Web sites are chronically insecure, according to new data from security firm WhiteHat Security. White Hat’s Website Security Statisics for Winter, 2011, found that most websites were exposed to at least one serious vulnerability a day for between 9 and twelve months of last year, and that only 16...
Poll Results : Prefer way b/w Whitehats & Blackhats ?
Poll Results : Question : With whom/as whom you will Prefer to work ? a Registered WhiteHat Hackers b Unregistered BlackHat Hackers We have Total 457 Votes in 15 Days on our Sites. Finally today the result is out, and Registered WhiteHat Hackers won by 72% Votes 331 Votes , where Unregistered...
Hacking by Numbers
In this video from the OWASP AppSec Research conference, Tom Brennan of WhiteHat Security discusses the current trends in vulnerabilities in Web applications and what’s driving them...
Report: 60% of all web sites contain serious vulnerabilities
From DarkReading Kelly Jackson Higgins Most Websites harbor at least one major vulnerability, and over 80 percent of Websites have had a critical security flaw, according to new data released today by WhiteHat Security. The Website vulnerability statistics, based on Website vulnerability data...
Mini-Metricon Highlighted Risk, Measurements
I spent some time earlier this week at mini-metricon, a workshop that was inspired by the success of Andrew Jaquith’s security metrics mailing list and the larger Metricon which is held each year in conjunction with the USENIX Security Conference. In essence members of the mailing list gather eac...