• AusCERT 2013: Introduction to Network Security Monitoring with Security Onion - AusCERT Presentation

  By CSO staff | 23 May, 2013 17:41

  Although web application attacks have existed for over the last 10 years, simple coding errors, failed input validation and output sanitization continue to exist in web applications that have led to disclosures for many well-known companies. The most prevalent web application attacks are SQL Injection, Cross Site Scripting and OS Command Injection. With an increased number of companies conducting buisness over the Internet, many attackers are taking advantage of lax security and poor coding techniques to exploit web applications for fame, notoriety and financial gain.

• AusCERT 2013: Ashley Deuble: Network Security Monitoring with Security Onion

  By CSO staff | 23 May, 2013 12:48

  Although web application attacks have existed for over the last 10 years, simple coding errors, failed input validation and output sanitization continue to exist in web applications that have led to disclosures for many well-known companies. The most prevalent web application attacks are SQL Injection, Cross Site Scripting and OS Command Injection. With an increased number of companies conducting buisness over the Internet, many attackers are taking advantage of lax security and poor coding techniques to exploit web applications for fame, notoriety and financial gain.

• Name.com forces customers to reset passwords following security breach

  By Lucian Constantin | 09 May, 2013 11:55

  Domain registrar Name.com forced its customers to reset their account passwords on Wednesday following a security breach on the company's servers that might have resulted in customer information being compromised.

• Companies should ban Facebook Home, experts say

  By Antone Gonsalves | 08 April, 2013 14:34

  Social network's new overlay for Android smartphones 'would be the first thing I would block on my network,' said one security adviser

• Sophos fixes vulnerabilities in its Web security appliance

  By Lucian Constantin | 04 April, 2013 14:11

  Security vendor Sophos has released an update for the software used on its Web gateway security appliance in order to address three serious vulnerabilities in the product's Web-based user interface.

• Email lessons from Gen. Petraeus' downfall

  By Sharon Gaudin | 15 November, 2012 11:13

  Email is at the center of the scandal that brought down CIA Director David Petraeus, one of the country's most decorated generals.

Whitepapers about sophos

• 

  Case Study: HJ Heinz

  Heinz has trusted Sophos to protect its desktop users and email systems from malware and spam for many years. As part of its multi-tier approach to IT security, the company needed more robust protection against web-based threats and the use of unauthorised applications.