30

Stories about: misconfiguration

Major Security Hole Discovered on Facebook and MySpace A Web developer has documented a proof-of-concept attack that could have been used to hijack accounts and steal private information on Facebook and MySpace. The attack leveraged a serious security oversight in XML configuration files used to define the cross-domain access policy for Flash applications.The discovery w... 6 November 2009 08:08 GMT Six Million Vulnerable Embedded Network Devices Connected to the Internet A study on the prevalence of vulnerable embedded network devices on the Internet has revealed worrying results. Researchers have discovered tens of thousands of remotely-accessible devices with default passwords during their scans so far. The project, which maps the distribution of vulnerable embedded network device... 27 October 2009 09:17 GMT