Monthly Archives: January 2012

Breaking the barrier: Bypassing XSS filters

Cross site scripting a.k.a XSS is assumed to be a low level threat and often avoided by web developers during development and deployment of web applications. But the past years passed have faced the Tsunamis of XSS, making this attacking … Continue reading

Tagged , , , , | 1 Comment

Penetration testing from Android: Its possible now!

A lot of time when we (security professionals!) are on a travel or like that, we miss our security toolkit as many times its unconventional to carry laptops everywhere. At that time we wish to have a device within inches … Continue reading

Tagged , , , , | Leave a comment

Do you support SOPA-PIPA?

“SOPA-PIPA”, these two words are on every netizens mouth. Aggression, censorship are what they relate to. Lets quickly define what these terms are and how they co-relate with you and me. The Stop Online Piracy Act (SOPA) is a United … Continue reading

Tagged , , | 1 Comment

Information security: Is your company’s management ready for it?

Days are gone when useful, sensitive and confidential data in the form of paper and files of big companies were put in a safe locker. The emerging technologies and the beginning of technical era has brought internet and computers close … Continue reading

Tagged , , , | Leave a comment

Does Indian military have access to RIM, Apple and Nokia?

Access and surveillance on the telecom and cyber world have always raised concern over privacy of users. In the race of getting one step ahead of the enemy, the communication platforms have been useful in extracting useful information for nations. … Continue reading

Tagged , , , , , | Leave a comment

New worm steals 45,000 Facebook accounts

A new worm has hit Facebook and has stolen 45,000 login credentials from it. The data is believed to have been taken largely from Facebook accounts in the UK and France as reported by Seculert . The worm called Ramnit … Continue reading

Tagged , , , , | Leave a comment

SQL Injection attack infects 1 million webpages

Security researchers from Internet Storm Center (ISC) have pointed out a mass SQL injection attack. The attack was named lilupophilupop because it redirected users to a domain with that name. At that present time (December 2011) there were only 80 … Continue reading

Tagged , , , , , , | 2 Comments