ISBuzz Team

Igor Baikalov, chief scientist at Securonix (www.securonix.com), provided the following analysis of reports of a powerful flaw in the Hilton Hotels site that lets anyone hijack a Hilton Honors account just by knowing or guessing its valid 9-digit Hilton Honors account number.

Read More

Ryan Barnett, Senior Lead Security Researcher, Trustwave has analysed a real-world web compromise exploiting a Drupal SQL injection vulnerability (a.k.a. Drupalgeddon) that enables criminals to take control of websites. In this blog post, he will take a step-by-step analysis of a real world compromise of a Drupal web application.

Read More

Hans Zandbelt, Senior Technical Architect at Ping Identity, discusses the role identity will play in securing and enabling broader internet in 2015. In 2014 we saw connected homes and mobile wallets became a reality. The Internet of Things (IoT) well and truly entered the mainstream, with high profile events such as the Consumer Electronics Show bringing everything ‘IoT’ to the forefront of the news agenda.

Read More

15,435 vulnerabilities in close to 4,000 applications in 2014 15,435 vulnerabilities across 3,870 applications were recorded in 2014 – that’s an 18% increase in vulnerabilities compared to the year before, and a 22% increase in the number of products.

Read More