Viewing profile — robert681

Are we taking the right approach to solving existing password problems?

A plugin that can track all activity on a WordPress multisite network installation (the first one to date if I am not mistaken)

Learn what changed and what is new in the new PCI DSS 3.0 guidelines and how it can impact your business and security operations

The French government created fake Google SSL certificates to do a man in the middle attack on its own citizens and spy on them while using Google

A cool new concept of two-factor authentication mechanism. Implemented on WordPress via a plugin, but service also available via an API for other web applications

WordPress automatic updates are now available. This tutorial explains how to configure them and how to use filters to fine tune them.

A very fascinating story indeed! For people already working in the security industry it might look easy because they used very common attack vectors but the generic public have no …

Hi Noel, You can try BuySellAds, which is most probably the most popular alternative to Google Adwords. Then there are some other alternatives. Refer to the following for more info…

A simple explanation on how to choose the fastest (and most cost effective) web application security scanner.

Although PCI compliance has become popular, it has several shortcomings hence PCI compliant web applications (and businesses) are still getting hacked. Read all about its shortcomi…

A complete guide on how to evaluate web application security scanners based on your own requirements.

Here is a list of top 10 most common mistakes both experts and not do when doing a web vulnerability assessment. If you avoid these 10 mistakes, you'll be able to successfully iden…

A research shows that more than 70% of the most popular WordPress websites (in Alexa top 1 million sites) are vulnerable to automated hacker attacks.

Once you know more about the most common WordPress hack attacks it will be easy to improve your WordPress security and protect your blog or website from such attacks.

Upgrade your WordPress to 3.6.1. This new release is a maintenance and Security release; contains fixes for security vulnerabilities in WordPress

With BigDump you can overcome those phpMyAdmin file size upload limit and Web Server execution timeout. With Search and Replace you can replace data in WordPress databases without …

This security article contains development tips on how to write more secure web application code and also admin tips to help webmasters take proper security measures to protect the…

Because web applications have become really complex and large, it has become almost impossible to detect vulnerabilities in web applications unless you use automated tools.

Here are some pointers which you can follow to help you tell if your WordPress is hacked. The earlier you find out, the less damage is done and the easier it is to recover.

When I explain to people that these type of vulnerabilities still exist in today's modern and complex web applications, they laugh at me because they do not believe it.

Netsparker web application security scanner automatically exploits detected vulnerabilities to ensure no false positives are reported.

SQL injection has been around for 14 years and it is still the most dangerous and widely exploited web application vulnerability. Ever wondered why?

False Positives are a big problem in web application security and typically they hinder the process of securing a web application. Read more about false positives and how to tackle…