Tag: vulnerability
-
Guest post: Why you need patch management
Today we have another guest post from our friends at GFI – this time on patch management (which unfortunately is one of the reasons that so many pentests are so easy to succeed in…) Every organization uses several types of software such as operating systems, servers, clients and many other third party applications. Every software…
-
The curious case of Dropbox security
After the disclosure of the host_id authentication issues that plagued the popular Dropbox service last week, a new issue came up with the fact that Dropbox can detect whether the files you are trying to upload to their cloud already exist there, and “save you the bandwidth” of uploading it if they already have a…
-
Defining Penetration Testing
I have been fortunate enough to be working with a group of peers from the security industry over the past few months (since November 2010) on finally creating a solid definition of what a penetration testing is. It has been a topic that has been abused, cannibalized, and lowered to a level where we (as in…