Sean Michael Kerner

The researcher once known as Rain Forrest Puppy explains how he discovered the first SQL injection more than 15 years ago.

Apple's OS X 10.9 update provides a long list of new security features and fixes that aren't in the 10.8 release.

Speaking at the SecTor conference, Trustwave exec details the four steps that are part of every breach.

Are you at risk for an Android vulnerability that involves the verification process for the popular OS? Find out!

A new study from Whitehat finds SQL injection doesn't even make the top 10 of website security attacks.

Secure Sockets Layer (SSL) is foundational technology that secures Web transactions. Find SSL recommendations here.

As malware becomes more sophisticated, so too must the enterprise's defensive perimeter.

Leading open source penetration testing framework adds phishing attacks to its arsenal. What can and should an enterprise do?

At the SecTor security conference, the head of Security Engineering for Check Point explains how modern IT risks such as APTs and BYOD relate to the mythology of Star Wars.

The CTO of Qualys explains how the shift from traditional to Web applications will require developers to raise their security games.

WebSockets offer the promise of improved TCP connections, but do they also invite new forms of attack on your applications and infrastructure?

After 10 years on Apache, the popular open source ModSecurity web application firewall is expanding its footprint to Microsoft's IIS web server.