ICT Security-Sécurité PC et Internet

By Dancho Danchev

Hundreds of thousands of legitimate web sites are currently affected in a a mass SQL injection attack that has been ongoing for the past several months. 

The ongoing mass SQL injection attacks, are directly related to last year’s scareware-serving Lizamoon mass SQL injection attacks.

The cybercriminals behind it, are automatically exploiting the legitimate web sites, and embedding a tiny script on the affected pages, abusing an input validation flaw, or exploiting vulnerable and outdated versions of the web application software running on them.

Gust MEES: Check also http://www.scoop.it/t/ict-security-tools?tag=MySQL-Database-Protection&nbsp to find out on How-To protect MySQL-Databases...

McAfee's Slavik Markovich and Sean Roth demonstrate how MySQL databases — sitting beneath web applications — need protection from hacks and attacks.