Home

The Case of an Unconventional Cross Site Request Forgery Attack in Firefox

Many recognise that the internet is an insecure place to be, but sometimes the browser itself can heighten this likelihood. In his latest blog post, Jonathan Kuskos WhiteHat's A-Team Application Security Engineer, warns to the danger of an unconventional attack in Firefox (versions 21 and below) - Cross Site Request Forgery.

In his commentary, Jonathan:

Explains ‘Cross Site Request Forgery’

Explains ‘verb tampering’

Uses examples to show how this attack works

Warns that, while Firefox 22 has been patched, previous versions remain vulnerable - highlighting the issue that users should update browsers to remain secure

: JONATHAN KUSKOS, A-TEAM APPLICATION SECURITY ENGINEER, WHITEHAT; InfoSecurity; Posted On Friday, 28 June 2013 09:02

How DDoS Attackers Turn Mitigation Devices Against You

Backscatter from mitigation devices can cause collateral damage in SYN reflection attacks

HOLLYWOOD, FL: Prolexic, the global leader in Distributed Denial of Service (DDoS) protection services, yesterday shared information on a popular cyber attack technique, SYN reflection attacks, which can leverage the defense mechanisms of DDoS mitigation devices to increase the strength of the attacks.

: MICHAEL DONNER; Case Studies; Posted On Thursday, 27 June 2013 13:35

Tripwire: Mobile malware increases by 614%

Today, we bring to to our readers two expert opinions on Juniper Networks’ recent report which says that mobile malware has grown by 614% since 2012. Happy reading!

: LUCY HARVEY; Talking Point; Posted On Thursday, 27 June 2013 13:24

Mobile devices call for security solutions that don't apply to the PC world

Information security is an ongoing game of cat and mouse between IT organisations and hackers. The way that organisations consume and protect information changes as frequently as the methods hackers use to attack it.