Indusface Blog

April 18, 2014

Venkatesh Sundar

2 min Read

I was looking at Heartbleed bug code and it appears that it is not a buffer overflow. Rather, the buffer is left unfilled and the receiver fooled. The receiver just.

April 18, 2014

Venkatesh Sundar

2 min Read

The day the world got to know of Heartbleed, is going to be a day that security professionals, across organizations, more than anyone else will remember.

April 11, 2014

Nandini Tandon

4 min Read

On April 7th, a major vulnerability in OpenSSL, the most prevalent software used for encryption and other purposes on the web and the internet was discovered. Here are details about what.

April 4, 2014

Venkatesh Sundar

6 min Read

To prevent Broken Authentication vulnerability, use strong password policies, implement multi-factor authentication, and regularly monitor user activity.

March 28, 2014

Venkatesh Sundar

5 min Read

The Hacker Series By Bhaumik Merchant, Information Security Research Consultant, Indusface Introduction: This article demonstrates a unique kind of communication technique between an attacker machine and a victim machine during.

March 14, 2014

Venkatesh Sundar

3 min Read

Recently, I was conducting a security audit for an organization. They had deployed a WAF (Web Application Firewall) for their critical web apps. However, when I asked them about the.

February 28, 2014

Venkatesh Sundar

3 min Read

Website defacement is the electronic graffiti of choice for most “Hacktivists” these days. According to Wikipedia – Website defacement is “an attack on a website that changes the visual appearance.

February 19, 2014

Venkatesh Sundar

2 min Read

By Client Services Team, Indusface

February 5, 2014

Venkatesh Sundar

3 min Read

SQL injection is one of the deadliest because it has the potential of retrieving the whole database from the web server. See how WAF signatures can help.

January 22, 2014

Venkatesh Sundar

< 1 min Read

The PCI Security Standards Council (PCI SSC) has recently published version 3.0 of the PCI Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS) for debit and.