Grim Mid-Year Security Reports
NetworkWorld is getting a jump on IBM Internet Security Systems "Midyear Trend Statistics" due out this week and reporting that the major commercial vendors (Apple, Cisco, IBM, Oracle, and Sun) are joined by open source content management projects Drupal, Joomla and WordPress. SQL injection attacks continue to be a serious problem.
The article also discusses Websense's mid-year report that finds:
Sixty percent of the of 100 most-popular Web sites have been hosting malicious code or inadvertently distributing it," says Stephan Chenette, manager of the Websense Security Labs
This fits with Fortify's findings in its open source study released earlier this week which found 15,612 SQL injection vulnerabilities in 11 popular open source applications.
Relational databases are ideal data stores for many applications but we can no longer deploy applications written to an "Introduction to SQL" level of understanding. For more on SQL injection attacks and how to avoid them, check out this podcast.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
