ModProfiler Presentation at OWASP AppSec Israel 2008 I will be giving the updated version of our ModProfiler presentation this Sunday (14th) at the OWASP Israel 2008 conference. ModProfiler has seen a release or two since Black Hat (where it was announc

36 views read more 2008-09-11 08:05:00

Rogue SF sysadmin may cost city over $1m Send in the consultants! The disgruntled sysadmin accused of locking San Francisco out of its IT network may cost the city more than $1m in upgrades, consultants and repairs to undo the damage, accord

33 views read more 2008-09-10 13:39:15

Notorious Israeli Pentagon hacker on ATM fraud rap Analyze That Canadian police have cuffed a notorious Israeli hacker over allegations of financial fraud, seven years after he avoided jail after being convicted of hacking into Pentagon systems.…

29 views read more 2008-09-08 10:37:20

ModProfiler: Leading ModSecurity Towards Positive Security Several years ago, a few more than I'd like to admit, I realised our chances for writing completely secure web applications are extremely slim; virtually non-existent. We can certainly try—and many

24 views read more 2008-09-08 07:22:00

Best Practices: Use of Web Application Firewalls Back in May, at AppSec OWASP in Ghent, I listened to Alexander Meisel (who was presenting on behalf of OWASP Germany) talk about best practices for web application firewall deployment. The interesting

44 views read more 2008-09-01 10:06:00

Fog of attack clouds Best Western hack Are you local? Really? Analysis Conflicting claims by Best Western and Glasgow's Sunday Herald over the scope of a recent security breach have been put under the microscope by security watchers. The p

39 views read more 2008-08-29 05:39:40

French train tickets go USB We don't need no stinkin' ISO7816 The French National Railway Company is trialling contactless tickets with USB connections, replacing the ubiquitous ISO7816 for online top-ups and data storage.…

35 views read more 2008-08-28 05:51:04

McKinnon heads for the last chance saloon Pentagon hacker's final appeal Accused Pentagon hacker Gary McKinnon is approaching his own D-Day, with his fate due to be sealed in the European Court of Human Rights in Strasbourg.…

32 views read more 2008-08-28 04:52:00

ModSecurity Issue Tracker Now Available I am happy to announce that we've just launched a public issue tracking facility for ModSecurity. It's available at https://www.modsecurity.org/tracker/. We've selected JIRA for this purpose, not only

35 views read more 2008-08-27 09:26:00

Minister warns of national grid hack threat And theft of commercial secrets A UK government minister has warned that cyber-terrorists were attempting to take out the national grid.…

28 views read more 2008-08-26 09:52:28