Archive for June, 2007
The 1000 Blog Vulnerability Assessment
Although, wp-scanner online is still in its infant stages, the results of these tests are certainly eye opening. You’ll see that a large percentage of WordPress blogs are vulnerable to atleast one known attack that may allow an attacker to compromise the website and more then likely the web server.
Around this time last month, BlogSecurity [...]
Interview with Stefan Esser
Stefan Esser has worked in several different security fields over the years, and is very well-known and respected within the security arena. He has been involved in several web projects (PHP/Java/Python/Ruby) which resulted in the PHP Hardening-Patch, the Suhosin PHP Security Extension and finally in the Month of PHP Bugs. Recently, he took part in [...]
wp-scanner online v1.2 released
64 Blogs have been tested since wp-scanner v1.1 was launched a couple days ago with half of them having severe flaws; however, v1.1 was more of a pilot really and was not very user friendly. v1.2 includes some initial warnings as well as links to helpful articles, it also includes 15 new plugin checks as [...]
wp-scanner goes online
wp-scanner online has just been released; we are still bouncing ideas around the project but check it out and feel free to try the BETA.
We will be making its findings alot more user friendly fairly soon, this is just the initial online release to get a feel for what the community thought.
Launch WordPress Vulnerability Scanner.
Have [...]
BlogSecurity Milestone
BlogSecurity reached 99 RSS subscribers today falling short of 100 by a single subscriber, can you believe it!
We want to take this opportunity to thank and recognise those people behind BlogSecurity’s content over the past month and a half. The list includes:
David Kierznowski
Sarah Turner
Philipp Heinze
Geek With Laptop
sid
We don’t want to leak to much information about [...]



