Invicti Security Team, Author at Invicti

Articles by Invicti Security Team

Netsparker Terminates Support for TLS 1.0

Netsparker will no longer support TLS 1.0 from 14 January 2019. This will affect all HTTPS traffic to Netsparker, including: software updates, the licensing process for Netsparker and vulnerability database updates. Netsparker requests that all users encountering issues should update their settings or contact Netsparker Support.

December 2018 Update for Netsparker Standard

This blog post announces the new features and improvements in the latest Netsparker Standard release of December 2018. Highlights include: a rewritten sitemap and issues panel, a new family vulnerabilities feature, added support for 64-bit smart card drivers and Swagger 3.0 Importer, and several send to integration additions.

Netsparker’s Weekly Security Roundup 2018 – Week 05

In this week’s edition of our security roundup: why you should be careful what you put into your composer.json file, why you need to use a Package Manager, the Principle of Least Privilege and DNS Rebinding

Netsparker’s Weekly Security Roundup 2018 – Week 04

In this week’s edition of our security roundup: Thanks to Chrome’s new Site Isolation feature, the X-Content-Type-Options header is more important than ever.

Netsparker’s Weekly Security Roundup 2018 – Week 02

In this week’s edition of our security roundup: directory listings can lead to account takeover, accessibility and security of US government websites and certification authority with AlwaysOnSSL.

Netsparker’s Weekly Security Roundup 2018 – Week 01

In this week’s edition of our security roundup: The Impact of Meltdown and Spectre On the Web and HTTP Verb Tampering and a phpMyAdmin Cross-Site Request Forgery.

Netsparker’s Weekly Security Roundup 2017 – Week 52

In this week’s edition of our security roundup: HPKP and HSTS preload bypasses, a vBulletin LFI on Windows hosts and three creative sources of user input in order to exploit XSS vulnerabilities.

Netsparker’s Weekly Security Roundup 2017 – Week 51

A weekly security roundup by Netsparker for week 51 of 2017 – We examine the differences between the latest version of OWASP Top 10 and its predecessor. We also delve into the Mailspoilt vulnerability, security issues with EV Certificates and Google’s .dev Support.