April 13, 2018 Application Security, Research Nadav Avital, Koby Kilimnik Drupalgeddon 2.0: Are Hackers Slacking Off? Ever since March 28th, when Drupal published a patch for a RCE named Drupalgeddon 2.0 (SA-CORE-2018-002/CVE-2018-7600), Imperva has been monitoring our cloud looking for hackers’ attempts to exploit the vulnerability,...
April 13, 2018 Application Security Robert Hamilton Securing Modern Web Applications: Threats and Types of Attacks Web Application Firewalls are the most advanced firewall capabilities available to IT teams. Deploying the appropriate WAF is important, especially these days when the security threat landscape is changing so...
April 10, 2018 Data Security, Insider Threats Nir Harif How to Tune Your Database Security to Protect Big Data Data security for big data faces the same threats of external breaches, malicious insiders, and compromised insiders. So how do we take the trusted, successful data security methods used on RDBMS, and render them compatible with big data servers? How can we close the gap between big data servers’ demand, and the lacking security measures used to protect them? Here's how we believe you can tune your security to protect big data.
April 5, 2018 Data Security, Research Elad Erez, Luda Lazar A Deep Dive into Database Attacks [Part IV]: Delivery and Execution of Malicious Executables through SQL Commands (MySQL) In this post we cover different techniques for execution of SQL and OS commands through MySQL database servers that can be used for delivering and executing malicious payloads on a target system.
April 4, 2018 Compliance, Data Security Nir Harif Streamline Compliance with SWIFT Customer Security Program Requirements Transferring money from our bank accounts has never been easier than it is today. With a single click on our smartphones, we can transfer money from a bank account in...
April 2, 2018 Application Security Natasha Gupta DevOps-Ready WAF: Scaling Security for a More Agile Environment With the maturation of DevOps, the growing concern around the security and compliance of more agile application development systems has made 2018 the year for DevSecOps. According to a study...
