<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
In case this report is of interest<br><br><div> <span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: New York; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Arial; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Arial; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><div style="font-family: Arial; "><font class="Apple-style-span" face="New York">......Allison Dolan (617-252-1461)</font></div><div style="font-family: Arial; ">extract below - full article at <a href="http://www.darkreading.com/security/app-security/showArticle.jhtml?articleID=221601000&subSection=Application+Security">http://www.darkreading.com/security/app-security/showArticle.jhtml?articleID=221601000&subSection=Application+Security</a></div><p style="margin: 0.0px 0.0px 10.0px 0.0px; line-height: 12.0px"><font class="Apple-style-span" color="#5B5B5B" size="7"><span class="Apple-style-span" style="font-size: 32px; line-height: normal;"><b><br></b></span></font></p><p style="margin: 0.0px 0.0px 10.0px 0.0px; line-height: 12.0px"><font face="Arial" size="7" color="#5b5b5b" style="font: 32.0px Arial; color: #5b5b5b"><b>Majority Of Web Apps Have Severe Vulnerabilities</b></font></p><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; line-height: 12px; "><font face="Arial" size="5" style="font: 16.0px Arial"><b>Flaws 'could potentially lead to the exposure of sensitive or confidential user information during transactions,' according to new report from Cenzic</b></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; line-height: 12px; "><font face="Arial" size="3" style="font: 12.0px Arial">Nov 10, 2009 | 09:40 AM</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; line-height: 12px; "><font face="Arial" size="3" style="font: 12.0px Arial"><b>By Thomas Claburn, InformationWeek</b></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; line-height: 12px; "><font face="Arial" size="3" style="font: 12.0px Arial"><b>Special to Dark Reading</b></font></div><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px; font: 12.0px Arial; min-height: 14.0px"><br></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">The number of software vulnerabilities detected has risen to the point that almost 9 out of 10 Web applications have flaws that could lead to the exposure of sensitive information.</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">Cenzic's "Web Application Security Trends Report Q1-Q2, 2009" report, released on Monday, says that more than 3,100 vulnerabilities were identified in the first half of the year, 10% more than the number identified in the second half of 2008.</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">Of the vulnerability total, 78% were Web application vulnerabilities, lower than in the second half of 2008 but higher than in the first half of last year.</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">The SANS Institute's Top Cyber Security Risks report, released in September, found that over 60% of attack attempts on the Internet target Web applications.</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">Ninety percent of the Web application vulnerabilities were in commercial Web apps and 8% were the browsers that run Web apps, Cenzic's report says.</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">The makers of the software affected by the top ten vulnerabilities include PHP, SAP (NYSE: SAP), Sun, Citrix (NSDQ: CTXS), Apache, F5 Networks, Symantec (NSDQ: SYMC), and IBM (NYSE: IBM).</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">Cenzic says that SQL Injection and Cross Site Scripting vulnerabilities played a role in 25% and 17% of all Web attacks respectively.</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">Cenzic's report claims that 87% of the analyzed Web applications "had serious vulnerabilities that could potentially lead to the exposure of sensitive or confidential user information during transactions."</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">In the second quarter of 2008, that number was 78%.</font></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px"><font face="Arial" size="3" style="font: 12.0px Arial">In terms of browser vulnerabilities, Firefox and Safari led the pack, and Google (NSDQ: GOOG) Chrome was conspicuously absent.</font></p><p align="center" style="text-align: auto;margin-top: 0px; margin-right: 0px; margin-bottom: 12px; margin-left: 0px; line-height: 12px; font: normal normal normal 12px/normal Arial; min-height: 14px; "><br></p><p style="margin: 0.0px 0.0px 12.0px 0.0px; line-height: 12.0px; font: 12.0px Arial; min-height: 14.0px"><br></p></span></span></span> </div><br></body></html>