State of the Web Report 2016
Translation of key points from respected German IT magazine heise.de [1] about Menlo Security&#x27;s paywalled web security report [2] published today:<p>- top vulnerable web server is nginx 1.8.0 followed by IIS 7.5<p>- vulnerabilities (mostly phishing) not limited to porn or other sites with questionable content; use of foreign content (ads, cdns) main vector for phishing attacks (who would&#x27;ve thought?)<p>- recommends to <i>always</i> use ad blockers; also recommends to use HTML subresource integrity feature to web developers<p>While most points aren&#x27;t surprising, I&#x27;d expected nginx to have a better security record.<p>[1] https:&#x2F;&#x2F;www.heise.de&#x2F;newsticker&#x2F;meldung&#x2F;State-of-the-Web-2016-Jede-zweite-Website-ist-ein-Sicherheitsrisiko-3569114.html (in German)<p>[2] https:&#x2F;&#x2F;www.menlosecurity.com&#x2F;state-of-the-web-ig-lp-2016