robert681

Are we taking the right approach to solving existing password problems?

A plugin that can track all activity on a WordPress multisite network installation (the first one to date if I am not mistaken)

Learn what changed and what is new in the new PCI DSS 3.0 guidelines and how it can impact your business and security operations

The French government created fake Google SSL certificates to do a man in the middle attack on its own citizens and spy on them while using Google

A cool new concept of two-factor authentication mechanism. Implemented on WordPress via a plugin, but service also available via an API for other web applications

WordPress automatic updates are now available. This tutorial explains how to configure them and how to use filters to fine tune them.

A simple explanation on how to choose the fastest (and most cost effective) web application security scanner.

Although PCI compliance has become popular, it has several shortcomings hence PCI compliant web applications (and businesses) are still getting hacked. Read all about its shortcomings.

A complete guide on how to evaluate web application security scanners based on your own requirements.

Here is a list of top 10 most common mistakes both experts and not do when doing a web vulnerability assessment. If you avoid these 10 mistakes, you'll be able to successfully identify all web security vulnerabilities.

A research shows that more than 70% of the most popular WordPress websites (in Alexa top 1 million sites) are vulnerable to automated hacker attacks.

Once you know more about the most common WordPress hack attacks it will be easy to improve your WordPress security and protect your blog or website from such attacks.

Upgrade your WordPress to 3.6.1. This new release is a maintenance and Security release; contains fixes for security vulnerabilities in WordPress

With BigDump you can overcome those phpMyAdmin file size upload limit and Web Server execution timeout. With Search and Replace you can replace data in WordPress databases without breaking the integrity of the database.

This security article contains development tips on how to write more secure web application code and also admin tips to help webmasters take proper security measures to protect their web applications from SQL injection…

Because web applications have become really complex and large, it has become almost impossible to detect vulnerabilities in web applications unless you use automated tools.

Here are some pointers which you can follow to help you tell if your WordPress is hacked. The earlier you find out, the less damage is done and the easier it is to recover.

When I explain to people that these type of vulnerabilities still exist in today's modern and complex web applications, they laugh at me because they do not believe it.

Netsparker web application security scanner automatically exploits detected vulnerabilities to ensure no false positives are reported.

SQL injection has been around for 14 years and it is still the most dangerous and widely exploited web application vulnerability. Ever wondered why?

False Positives are a big problem in web application security and typically they hinder the process of securing a web application. Read more about false positives and how to tackle them, or better, avoid them!

With the new version of WP Security Audit Log plugin you can keep better track of what is happening on your WordPress blog and websites and identify any issues before they become WordPress problems.

There are several benefits to using automated web application security scanners to detect vulnerabilities.

In case you missed their release some time ago, here is a blog post explaining what is new and what changed in this year's OWASP Top 10.