New Blog Now Open at JockPereira.com

This older IT security blog has been enhanced and is now updated within http://www.jockpereira.com. Please check out the site and let me know what you think! Over the next few weeks I will be transitioning many of my articles from this site to http://www.jockpereira.com Thanks! Jock

WordPress wp business intelligence lite plugin sql injection vulnerability

2015 WordPress SQL Injection Vulnerability

WordPress WP Business Intelligence Lite Plugin SQL Injection Vulnerability Alert: There is an IT security alert detailing WordPress wp business intelligence lite plugin sql injection vulnerability which poses a moderately critical threat and impacts … read more about it at http://www.exploit-db.com/exploits/36600/.

Myths versus reality. Is SQL injection on the rise or the decline? An interesting discussion between two articles.

Is it actually true? SQL injection vulnerabilities surge to highest levels in three years, according to DB Networks analyzed statistics from the National Vulnerability Database, a federally funded repository of cyber-vulnerability data maintained by the National Institute of Standards and Technology.

Article #1: “After years of steady decline, 2014 witnessed a significant uptick in SQL injection vulnerabilities identified in publicly released software packages. DB Networks research indicates this alarming fact is directly attributed to today’s software development methodology – an emphasis on deadlines and budgets that gives short shrift to the kind of security due diligence…

PCI DSS 3.0

24 Hours Until You Need To Seriously Consider PCI DSS 3.0 Compliancy.

The Payment Card Industry Data Security Standard (PCI DSS) is a proprietary information security standard for organizations that handle branded credit cards from the major card brands including Visa, MasterCard, American Express, Discover, and JCB. Private label cards –those without a logo from a major card brand are not included in the scope of the…