Stopbadware.org – Security Tips

There is some good information to be found at Stopbadware.org on securing a web site and ongoing efforts to eliminate the threat of malware being served up by compromised hosts and rogue web hosting companies. Some basic steps that can be taken to make your site more secure include the following: Use strong passwords. Use […]

Continue Reading

Google Online Security Blog: Web Server Software and Malware

Interesting study by Google on the distribution of malware across different web servers. They took a sample of 70’000 sites so it is a good indication of what is being compromised to serve up malware to the public. The breakdown by server software is depicted below. It is important to note that while many servers […]

Continue Reading

Network Computing | Vulnerability Assessment Scanners

The first paragraph of this Network Computing Feature should be a wake up call for anyone on the internet who does not take security of their servers seriously. Following on from the first alarming paragraph is a lengthy 9 page feature on various vulnerability scanners. The article clearly demonstrates that while vulnerability assessment is not […]

Continue Reading

The June07 Mpack attack

On 18th of June a large scale attack was uncovered at an Italian based Web Hosting company. Websense reported that over 10’000 sites were compromised and used to serve malware to unsuspecting end users. SANS Internet Storm Center had some good analysis of the Mpack exploit package that was used with a follow up story […]

Continue Reading