News and Press Releases
ImmuniWeb®, our innovative web application security assessment that combines manual penetration testing with cutting-edge vulnerability scanning into a single, comprehensive and highly-efficient SaaS solution, is now available in open Beta!
Security incidents, such as the recent Target breach that affected 70 million customers, attract a lot of media attention and unfairly outshine other less “noisy” hacks. We conducted an experiment analyzing Pastebin.com website that may indicate how big the hacking industry is today.
2013: 62 security advisories, 126 vulnerabilities in medium-sized and large web applications discovered. Trends and statistics by High-Tech Bridge Security Research Lab.
Last week we discovered several security vulnerabilities on website of World Economic Forum (WEF) that is holding its annual meeting in Davos (Switzerland) these days. Our attempts to get in touch with WEF security team remained without answer.
Phishing and Typosquatting are growing at an alarming rate. To understand the issue in detail High-Tech Bridge conducted research into how cyber-fraudsters are abusing domain names that are similar to the legitimate domains of most popular antiviruses.
E-commerce is booming, and as the holiday season is underway, High-Tech Bridge has undertaken a small experiment to check how SSL certificates are implemented at the Top 100 largest e-commerce websites.
High-Tech Bridge and UN agency, the International Telecommunication Union (ITU), announced the use of ImmuniWeb® as part of the toolset to ensure that the websites of ITU’s Member States are secure. The official announcement will take place at ITU Telecom World 2013 in Bangkok.
To understand the scale of the issue, we decided to perform some simple research to find out how many financial institution websites had actually been compromised. Of course, many security incidents passed unnoticed or were covered up by the victims, therefore we used only public and open sources of information to collect our statistics.
At High-Tech Bridge we decided to run a small experiment with Yahoo, a company that follows industry best-practices and encourages security researchers to report vulnerabilities they discover. Four XSS vulnerabilities affecting Yahoo website were discovered during the experiment.
Recent news in the international media has revealed numerous Internet privacy concerns that definitely deserve attention and further investigation. We decided to conduct a simple technical experiment to verify how the 50 largest social networks, web services and free emails systems respect – or indeed abuse - the privacy of their users.