Due to the really huge install base, I really hope that the folks at wordpress.org issue a patch quickly to address these vulnerabilities.

amazing that this nifty tool supports Server-side JS, GET, POST, uploads, Cookies, SQLite and AJAX.

Anurag Agarwal announced a series of professional portraits of the gurus in Web Applications Security .
Quoting Anurag :
Every friday i will present a major player from the web application security field and outline his contributions to the industry.
The series of mini biographies is called Reflection and this week’s security superstar was Amit Klein. […]

The new buzz of the Google Webmaster Tools’ Link has spread like wildfire. However, this great tool had a serious vulnerability which permitted to gain access to the links statistics of any website.

Bruce Schneier released a great essay on the Psychology of Security exploring how psychology can help explain the difference between the feeling of security and the reality of security.

I found a cool site which serves you a fake, random ID containing : name, address, email , phone, credit card number and even a SSN.

OSSTMM guru Pete Herzog released today an interesting guide on social engineering assessments.