During the past month, scammers have been targeting students by phishing a brand that belongs to the UK government. The legitimate brand provides information and services for government organizations to UK citizens. Students who are seeking financial services for their higher education can apply on this brand’s website.

Continue reading here:
UK Students Under Scam Attack

Ten of Application Security industry’s coolest, most interesting, important, and entertaining links from the past week — in no particular order.= Microsoft SDL version 5 Force.com Secure Cloud Development Stroke triggered XSS and StrokeJacking German Government Pays Hacker For Stolen Bank Account Data CAPEC-333: WASC Threat Classification 2.0 WAF Confusion Continues Serious New Java Flaw Affects All Current Versions of Windows + Advisory Safari Integer Overflow Aids Inter Protocol Exploitation OWASP AIR + Flash Security Projects Prion 1.1 - Polymorphic XSS Worm WhiteHat Security is a leading provider of website security services.

See the original post here:
Best of Application Security (Friday, Apr. 9)

Ten of Application Security industry’s coolest, most interesting, important, and entertaining links from the past week — in no particular order. Internet Explorer 9 “Platform Preview” Now Available From Microsoft Secure Application Development on Facebook OWASP Podcast #63 with Ed Bellis (CSO, Orbitz) PCI-SSC slaps ASVs wrists over marketing claims about 11.2 & 6.6 Researcher Will Expose 20 Hackable Apple Security Flaws alert(‘xss’) – The slow death of XSS Inline vs

Read the rest here:
Best of Application Security (Friday, Mar. 19)

Ten of Application Security industry’s coolest, most interesting, important, and entertaining links from the past week — in no particular order. Internet Explorer 9 “Platform Preview” Now Available From Microsoft Secure Application Development on Facebook OWASP Podcast #63 with Ed Bellis (CSO, Orbitz) PCI-SSC slaps ASVs wrists over marketing claims about 11.2 & 6.6 Researcher Will Expose 20 Hackable Apple Security Flaws alert(‘xss’) – The slow death of XSS Inline vs.

Read the original here:
Best of Application Security (Friday, Mar. 19)

In the past couple of months, Symantec has observed a mass phishing attack on two major brands that provide retail electronic payment services for banks across the globe.

Go here to see the original:
Mass Phishing of Retail Electronic Payment Brands

Ten of Application Security industry’s coolest, most interesting, important, and entertaining links from the past week — in no particular order. Verizon Incident Metrics Framework Released Wiseguys net $25m in ticket scalping racket State of Software Security Report Internet Explorer 8 and the Security Development Lifecycle (SDL) Top 10 Hacks of 2009 and WAF Mitigations FTC alleges that ControlScan offered ‘little or no verification’ of site security or privacy I’m in ur 4sq, snarfin ur password — Part I Fifteen Common Activities from BSIMM2 Even if You Don’t Invent Your Own Crypto….It’s Still Hard Facebook founder Mark Zuckerberg ‘hacked into emails of rivals and journalists’ WhiteHat Security is a leading provider of website security services.

Link:
Best of Application Security (Friday, Mar. 5)

Ten of Application Security industry’s coolest, most interesting, important, and entertaining links from the past week — in no particular order. Hitler and Cloud Computing Security Microsoft SDL Core Training Classes & Tools A Big Case of …OOPS… Customer-Induced FUD NT OBJECTives Response to the Larry Suto Report Web Security Dojo v1.0 & Watcher 1.3.0 release Online finance flaw: Ameriprise III Banks, Businesses, Viruses and the UCC Breaking Weak CAPTCHA in 26 Lines of Code Finding Input Validations flaws with Taint Checking WhiteHat Security is a leading provider of website security services.

Visit link:
Best of Application Security (Friday, Feb. 26)

In the past, viruses and computer threats were created simply for the sake of it. Sometimes these threats would wipe your hard drive clean—just to let you know you’d been owned.

Read the rest here:
Tidserv and MS10-015

We’ve received some questions regarding Apple’s iPad , and whether or not the lack of Adobe Flash support is for security reasons. Well, no, we don’t think so.

Read this article:
Is the lack of iPad Flash support for security?

Ten of Application Security industry’s coolest, most interesting, important, and entertaining links from the past week — in no particular order. Is APT After You

Read more from the original source:
Best of Application Security (Friday, Jan. 22)