Netsparker Terminates Support for TLS 1.0

Thu, 10 Jan 2019

Netsparker will no longer support TLS 1.0 from 14 January 2019. This will affect all HTTPS traffic to Netsparker, including: software updates, the licensing process for Netsparker and vulnerability database updates. Netsparker requests that all users encountering issues should update their settings or contact Netsparker Support.

December 2018 Update for Netsparker Standard

Thu, 10 Jan 2019

This blog post announces the new features and improvements in the latest Netsparker Standard release of December 2018. Highlights include: a rewritten sitemap and issues panel, a new family vulnerabilities feature, added support for 64-bit smart card drivers and Swagger 3.0 Importer, and several send to integration additions.

Netsparker’s Weekly Security Roundup 2018 – Week 05

Fri, 09 Feb 2018

In this week’s edition of our security roundup: why you should be careful what you put into your composer.json file, why you need to use a Package Manager, the Principle of Least Privilege and DNS Rebinding

Netsparker’s Weekly Security Roundup 2018 – Week 04

Fri, 02 Feb 2018

In this week’s edition of our security roundup: Thanks to Chrome’s new Site Isolation feature, the X-Content-Type-Options header is more important than ever.

Netsparker’s Weekly Security Roundup 2018 – Week 02

Wed, 17 Jan 2018

In this week’s edition of our security roundup: directory listings can lead to account takeover, accessibility and security of US government websites and certification authority with AlwaysOnSSL.

Netsparker’s Weekly Security Roundup 2018 – Week 01

Thu, 11 Jan 2018

In this week’s edition of our security roundup: The Impact of Meltdown and Spectre On the Web and HTTP Verb Tampering and a phpMyAdmin Cross-Site Request Forgery.

Netsparker’s Weekly Security Roundup 2017 – Week 52

Mon, 08 Jan 2018

In this week’s edition of our security roundup: HPKP and HSTS preload bypasses, a vBulletin LFI on Windows hosts and three creative sources of user input in order to exploit XSS vulnerabilities.

Netsparker’s Weekly Security Roundup 2017 – Week 51

Fri, 05 Jan 2018

A weekly security roundup by Netsparker for week 51 of 2017 – We examine the differences between the latest version of OWASP Top 10 and its predecessor. We also delve into the Mailspoilt vulnerability, security issues with EV Certificates and Google’s .dev Support.

14 years of SQL injection history and still the most dangerous vulnerability

Thu, 22 Aug 2013