ImmuniWeb Security Blog | Page 26

In this short blog post we will try to understand in quick and simple manner the difference between SAST and DAST testing methodologies, their advantages and disadvantages, as ...

There hasn’t been a day in recent months when the term “Advanced Persistence Threat” wasn’t making headlines in the media. According to ISACA APT Awareness Study, 93.6 per ...

What is the relation between growing security spending, increasing hacking attacks and falling economy?

One of the PCI DSS 3.1 requirements is Requirement 6.6 dedicated to web application security. In this blog post we will try to understand how to comply with the requirement in ...

Have you ever thought about the cost of your website compromise?

Everybody tends to think that hackers will never ever target them or their company/organisation until a breach occurs. We have already published several practical examples ...

Almost every month a new incident involving a big retailer, e-commerce or web platform makes the news headlines. Most retail fraud is now committed online, and in 2014 alone ...

Many financial institutions fail to perform comprehensive risk analysis and assessment, exposing their companies and clients to enormous risk.

On 1st June 2015 the new PCI (Payment Card Industry) 3.0 standard became mandatory, and includes a requirement to conduct web penetration testing at least once a year.

Following our previous blog post “How long does website penetration testing take” we received a lot of questions from our customers and partners about the recommended ...

In this blog post, we are going to share some interesting facts about a new vector of drive-by-download attack that we called ‘drive-by-login’.

Web applications are becoming a vital part of our everyday life. Almost any application has a web interface, or a web API. Microsoft and Google are moving their flagship products ...