<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>FireBlog by FireHost &#187; Vulnerability Exploitation</title>
	<atom:link href="http://www.fireblog.com/tag/vulnerability-exploitation/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.fireblog.com</link>
	<description>Secure Hosting Blog</description>
	<lastBuildDate>Fri, 16 Dec 2011 00:52:47 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Vulnerability Exploitation Trends: Web Applications Outpace Operating Systems</title>
		<link>http://www.fireblog.com/vulnerability-exploitation-trends/</link>
		<comments>http://www.fireblog.com/vulnerability-exploitation-trends/#comments</comments>
		<pubDate>Fri, 18 Sep 2009 14:00:50 +0000</pubDate>
		<dc:creator>FireHost Evangelist</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Prevent Hackers]]></category>
		<category><![CDATA[Secure Cloud Hosting]]></category>
		<category><![CDATA[Vulnerability Exploitation]]></category>

		<guid isPermaLink="false">http://www.fireblog.com/?p=2154</guid>
		<description><![CDATA[According to a report by SANS.org, OS vulnerabilities are patched more quickly than client-side vulnerabilities on average. As a result, hackers have found exploiting popular client-side applications such as Adobe PDF Reader, QuickTime, Adobe Flash, and Microsoft Office to be quite lucrative.]]></description>
			<content:encoded><![CDATA[<p><img class="alignright size-full wp-image-2190" title="vulnerabilityTrend" src="http://www.fireblog.com/wp-content/uploads/2009/09/vulnerabilityTrend.jpg" alt="vulnerabilityTrend" width="148" height="124" />According to a report by <a href="http://www.sans.org/top-cyber-security-risks/" target="_blank">SANS.org</a>, OS vulnerabilities are patched more quickly than client-side vulnerabilities on average. In addition, some client-side software remains unpatched or is not updated throughout it&#8217;s lifespan. As a result, hackers have found exploiting popular client-side applications such as Adobe PDF Reader, QuickTime, Adobe Flash, and Microsoft Office to be quite lucrative.</p>
<p>Attacks against popular web applications such as these constitute more than 60% of all attacks on the internet, and some of the exploits don&#8217;t even require a user to open the downloaded document or file. Victims&#8217; computers may be compromised by simply visiting an infected website masked with the perception of being a trustworthy, big, software brand.</p>
<p>Client-side vulnerabilities are so powerful because they give hackers a mask behind which to carry out exploits. Users feel confident downloading files from trusted sources or using tools and applications such as Microsoft SQL, FTP, and SSH that are perceived to be safe because of popularity and industry-wide user-acceptance.</p>
<p><span id="more-2154"></span></p>
<p>Did you know that:</p>
<ul>
<li>websites are most often compromised by SQL injection, Cross-site Scripting (XSS), and PHP File Include attacks.</li>
<li>web servers are primarily exploited and compromised  by brute force password guessing attacks and web application attacks.</li>
</ul>
<p>It&#8217;s scary, but true; there are a number of automated tools designed to make it easier for even novice hackers and script kiddies to carry out such attacks. Once deployed, these attack methods give cyber criminals the ability to quickly discover and infect thousands of  websites or computers at once in such a way that will propagate infections across other computers and servers around the globe.</p>
<p>Most importantly however, client-side vulnerabilities provide an open doorway through which many hackers can achieve their ultimate goal &#8211; stealing sensitive data for financial gain.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.fireblog.com/vulnerability-exploitation-trends/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Hackers Exploit Microsoft Vulnerabilities</title>
		<link>http://www.fireblog.com/hackers-exploit-microsoft-vulnerabilities/</link>
		<comments>http://www.fireblog.com/hackers-exploit-microsoft-vulnerabilities/#comments</comments>
		<pubDate>Tue, 19 May 2009 14:00:21 +0000</pubDate>
		<dc:creator>brucem</dc:creator>
				<category><![CDATA[Cloud Hosting]]></category>
		<category><![CDATA[Application Protection]]></category>
		<category><![CDATA[Hackers]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Vulnerability Exploitation]]></category>

		<guid isPermaLink="false">http://www.fireblog.com/?p=1008</guid>
		<description><![CDATA[In just the last few months, Microsoft has announced two vulnerabilities discovered in their popular Office application suite. This is a good example of a vulnerability in programs on your computer, and similar holes exist for web applications.]]></description>
			<content:encoded><![CDATA[<p><img class="alignright size-full wp-image-1263" title="windows-hack3" src="http://www.fireblog.com/wp-content/uploads/2009/05/windows-hack3.jpg" alt="windows-hack3" width="190" height="198" />On FireBlog, we&#8217;ve discussed several vulnerabilities found in open source applications, but it&#8217;s important to mention that vulnerabilities exist in even the most protected application code. Even Microsoft, which has a 1:1 ratio of programmers to quality control analysts, cannot always prevent their software from containing exploitable vulnerabilities.</p>
<p>In just the last few months, Microsoft has announced two vulnerabilities discovered in their popular Office application suite. Specifically, these vulnerabilities affect Excel and PowerPoint, and both flaws allow hackers to install malicious software or even hijack a computer completely. For more information about resolving these two vulnerabilities, read the <a href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&amp;taxonomyName=security_hardware_and_software&amp;articleId=9131040&amp;taxonomyId=145&amp;intsrc=kc_top" target="_blank">full report by <em>Computer World</em></a>.</p>
<p><span id="more-1008"></span></p>
<p>This is a good example of a vulnerability in programs on your computer, and similar holes exist for web applications. As we&#8217;ve explained previously, web application vulnerabilities found in Drupal or WordPress can just as easily be used by malicious hackers to exploit your website and customers. It&#8217;s important to take an active role in securing your website, with secure hosting such as FireHost.</p>
<p>Although every application will contain vulnerabilities of some kind, you can still guard against the exploitation of your website&#8217;s applications by malicious hackers. <a href="http://www.firehost.com/" target="_blank">FireHost</a> protects your company and valued customers with industry-leading security, including sophisticated web application firewalls to prevent hackers from exploiting the applications running your website.</p>
<p>The value of making your customers feel secure when dealing with your company website is immeasurable. Discover the difference FireHost secure web hosting will make for your company, visit <a href="http://www.firehost.com/" target="_blank">FireHost.com</a> and <a href="http://www.firehost.com/company/contact" target="_blank">contact a FireHost Agent today</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.fireblog.com/hackers-exploit-microsoft-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

