403 Web Security Blog

Insight from the leader in secure application development

Author Archive

The Unseen Security Dangers in Financial Web Sites

ostrich 234_2656771Web Application Security continues to be a focus in mainstream media these days. Web sites continue to be hacked and millions of identities, credit card numbers, and user login credentials are compromised and will, undoubtedly, end up in the wrong hands. As we look at these hacks, many of us shake our heads and say these web sites were obvious targets for cyber thieves just looking to make a … Read More »

My Web Site Has Been Hacked – Now What?

Horrified Busibessman 32_2521308With recent industry reports indicating the alarming fact that more than 70% of all web sites have critical security flaws, you will most likely find yourself on the wrong end of a web application security breach at some point. It may have happened already; it may happen in the near future; or you may have hackers visiting your site every few weeks to gather up information. If you own … Read More »

Covering Your Bets With Cyber Insurance

Briefcase622_3357137 smIf you’re being honest with yourself, major successful cyber attacks on companies in the past few years should convince you of the fact that your business could eventually fall victim to a cyber attack. Whether your company is big or small, whether you handle ‘protected’ data or not, whether you have a few customers or millions – a data breach could be a company crippling event. To be fair, … Read More »

Security Issues when Employees Quit

201_2728481Most organizations have procedures in place to smooth the process of ushering soon-to-be ex-employees out the door. While these procedures are important, they aren’t enough to protect IT resources. It is more important to have departure procedures that begin on an employee’s first day at work. All new employees should be required to review IT onboarding checklists and policies. These establish the access that employees will have and the … Read More »

Five Web Application Security Myths (Part 2)

cowMany Companies fail to Make the First Step Towards Security because of Misconceptions and Security Myths Protecting your website from hackers is tough. The battle between the good guys (you) and the bad guys (the hackers) is an ever escalating war where a misstep on your part may mean a breached site. Last week we touched on the first two of these myths. Get ready for the last three … Read More »

Five Web Application Security Myths (Part 1)

cowMany Companies fail to Make the First Step Towards Security because of Misconceptions and Security Myths Protecting your website from hackers is tough. The battle between the good guys (you) and the bad guys (the hackers) is an ever escalating war where a misstep on your part may mean a breached site. But, many companies fail to even make the first step towards security because of misconceptions and security … Read More »

The Zappo’s Breach – When Bad Things Happen to Good Companies

shoeWho doesn’t love Zappos? They are one of the friendliest Internet stores in the US. Zappos started in 1999 by Nick Swinmurn, a truly great guy, who grew the company to $1 billion in sales by 2008. It has been a few years, but I still remember those giant boxes of Zappos shoes my wife and daughter would order – lots of styles in several sizes each. The shoe … Read More »

Morto and Me

MortoA Secret Beginning My brief relationship with the Morto worm lasted exactly 5 days, at least that I know of. She may have been lurking in my life for several weeks before that time; there were times when I would just catch a glimpse of her out of the corner of my eye, but I cannot be sure. When Morto finally did decide to make herself known there was … Read More »

Help – I Think my Kid is a Script Kiddie

UntitledAs a security guy I sometimes have friends and relatives asking me for professional advice, like “I lost my iPhone, can you help me look for it?” or “How do I delete my browser history, you know, in case my wife checks up on me?”. It’s not easy being a technical wizard amongst the masses. The other day the mother of one of my daughter’s friends confessed her concern … Read More »

Cleaning Up Your PC For The New Year (part 2)

Happy New YearIt’s that time again – a new year, new resolutions and every attempt to be a better, smarter, smaller (that weight thing again), richer person in 2012. Some of you will even go so far as to do a New Year’s cleaning of your house, car (a source of shame for me, at least) and maybe the dog. As we consider our new, better lives, don’t forget January is … Read More »