November 2006 - Posts

The Best Way to Find Vulnerabilities
[Update 01/25/06 - This blog is now also available as a webcast .] I'm often asked - "what's the best way to find vulnerabilities?". That's kind of like asking "what's the best way to become a millionaire?". It depends. Read More...
Posted 30 November 06 05:37 by Erik | 3 Comments   
Why We’re Failing At Application Security
We are failing at application security. Need proof? Look no further than the vulnerability statistics released by Mitre earlier this year. While network vulnerabilities such as buffer overflows have slowly been decreasing over the years, web application Read More...
Posted 22 November 06 01:46 by Erik | 0 Comments   
Microsoft Black Tuesday - November 2006
Microsoft came out with a moderate collection of vulnerabilities for the month of November. The six security bulletins included a total of nine vulnerabilities with the following breakdown for maximum severity: 7 Critical 1 Important 1 Moderate This month's Read More...
Posted 14 November 06 02:26 by Erik | 2 Comments   
Filed under , ,
Top 10 Signs You Have an Insecure Web App
I often surf the web and see blatant design errors that make me shake my head. Without even investigating the security of a site, I know without a doubt that the site will be chock full of vulnerabilities. How can I be so sure? I see programming mistakes Read More...
Posted 01 November 06 12:40 by Erik | 17 Comments