Allen Baird

The EU Cyber Resilience Act affects software venders and others who must comply with its requirements. This blog post answers some key questions. This blog post is published under Dawn's name but it was a joint writing project.

Home WordPress Security Blog Why You Need CAPTCHA on Your WordPress Website You’re about to make an online purchase but all of a sudden you’re asked to decode a strangely twisted word, make a simple calculation, or identify which images presented…

Log management is the process of collecting information on the events generated by your software platforms, any applications you use, and the infrastructure on which everything runs. It’s true that not all software generates logs, and certain…

Pentest-tools.com – a spearheading toolkit that blends the best in scale and innovation with the human factor As the first exclusively cloud-based penetration testing platform, Pentest-Tools.com continues to lead the field, constantly evolving with…

Our external vulnerability scanner automates repetitive tasks to give you time for the creative work only you can do Compliance standards such as the PCI DSS state that you must perform vulnerability scans four times a year with both an external and…

As a WordPress website Administrator, you have the opportunity and responsibility to enforce a strong password policy on your users. In doing so, you will protect your organization, its websites, data, staff, and other users from various attacks. In…

Use a specialized scanner to prove what a bad actor with internal access can do – and how to stop them Internal vulnerability scans are vital to your penetration testing engagements. They pierce deeper inside a network than an external vulnerability…

Right now, security teams and pentesters must pick between a wide variety of diverse, specialized tools. Why? Because purchasing and trialing every tool out there is an unaffordable drain on resources. Selection and compromise are business…

Home WordPress Security Blog What is the best way to backup a WordPress website? If you’re asking what is the best way to backup a WordPress website, then you’ve made a good start. That means you know backing up your WordPress website or blog is…

At the time, we published a brief summary blog post called Web Application Security and the SDLC Discussed on the Virtualization and Cloud Security Podcast. But, the content is of such relevance and interest that we’ve compiled another blog post to…

There are three stages to the vulnerability detection process: Discover & Prioritize Identify Automate Discovering is a necessary starting point since you need to know your web app inventory. Then you can categorize your websites. Public websites and…

Sven Morgenroth, a security researcher at Netsparker, was interviewed by Mike Shema for Application Security Weekly #60 on May 6, 2019. Matt Alderman – CEO of Security Weekly – and John Kinsella also joined the conversation. The general theme of the…

Help Net Security, a daily source of information about security news, with a focus on enterprise security, recently interviewed Ferruh Mavituna, CEO at Netsparker. The interview was in podcast format and focused on how to Identify web application…

Sven Morgenroth, a security researcher at Netsparker, was interviewed by Paul Asadoorian and Larry Pesce for Paul's Security Weekly #584. Sven talked about PHP Object injection vulnerabilities and explained the dangers of PHP's unserialize function.…

At the end of 2018, PHP will stop releasing security updates and supporting PHP 5.6 as well as PHP 7.0. Considering there are millions of websites who are still running these old versions of the PHP framework, this move can put those millions of…