April 2009 - The HP Security Laboratory Blog

The HP Security Laboratory Blog

Home
Contact

Syndication

Archives

Sort by: Most Recent | Most Viewed | Most Commented

Matt Wood sets his own price

Matt Wood of the HP Web Security Research Group shows how a hacker can change a trade show registration price by exploiting an application security vulnerability in a cloud-based service. http://h30431.www3.hp.com/?fr_story=6dd2174bd5cd37363f3b844b8819dc149bc79b32&rf...

Published 04-28-2009 2:34 PM by mark.painter
Top Five Web Application Vulnerabilities 4/13/09 - 4/26/09

1) Apache Geronimo Application Server Multiple Remote Vulnerabilities Apache Geronimo Application Server is susceptible to multiple vulnerabilities including Cross-Site Scripting, HTML Injection, directory traversal, and Cross-Site Request Forgery. Successful...

Published 04-27-2009 7:36 PM by mark.painter

Filed under: XSS, XSRF
Intrusions test both the government and private industry

According to knowledgeable sources, the Obama administration will soon establish a new military command responsible for coordinating the defense of Pentagon computer networks and improving U.S. cyber offensive capabilities. This will hopefully move towards...

Published 04-24-2009 6:31 PM by mark.painter
New Personal Health Information (PHI) breach guidelines included in stimulus package

Under the American Recovery and Reinvestment Act of 2009 passed in February (otherwise known as the stimulus package), the Department of Health and Human Services (HHS), in consultation with the Federal Trade Commission (FTC), must issue rules requiring...

Published 04-20-2009 6:03 PM by mark.painter

Filed under: HIPAA, PHI
Verizon's 2009 Data Breach Investigation Report released today

Today's release of WebInspect 8.0 (death, taxes or WebInspect...you make the call) couldn't be more timely. Verizon's 2009 Data Breach Investigation Report also came out today, and it once again shows the need for web application security...

Published 04-15-2009 8:54 PM by mark.painter

April 2009 - The HP Security Laboratory Blog

Syndication

Recent Posts

Tags

Archives

Matt Wood sets his own price

Top Five Web Application Vulnerabilities 4/13/09 - 4/26/09

Intrusions test both the government and private industry

New Personal Health Information (PHI) breach guidelines included in stimulus package

Verizon's 2009 Data Breach Investigation Report released today