HTML5 Can Make Older Code Insecure

HTML5 Can Make Older Code Insecure

Critical Facebook XSS serves as proof

Dangerous XSS Bug Found on YouTube

Dangerous XSS Bug Found on YouTube

Rogue scripting inserted into comments

Several Symantec Websites Vulnerable to Cross-Site Scripting

Several Symantec Websites Vulnerable to Cross-Site Scripting

Could be exploited in targeted attacks

Twitter XSS Vulnerability Possibly Exploited by Turkish Hackers

Twitter XSS Vulnerability Possibly Exploited by Turkish Hackers

Promptly fixed by Twitter after its disclosure

Free Hacking Lessons from Google

Free Hacking Lessons from Google

Insecure microblogging application purposely created to teach webmasters

Complex Attack Hits Apache.org Services

Complex Attack Hits Apache.org Services

A mix of cross-site scripting, brute force and social engineering

EU Presidency Website Defaced

EU Presidency Website Defaced

Spanish Prime Minister's picture changed with one of Mr. Bean

Web Protection Library 1.0 CTP, the Evolution of the Anti-XSS Library

Web Protection Library 1.0 CTP, the Evolution of the Anti-XSS Library

Drops soon, promises Microsoft

Download Firefox 3.7 Preview with Anti-XSS Security Enhancements

Download Firefox 3.7 Preview with Anti-XSS Security Enhancements

Firefox 3.7 will be able to block cross-site scripting related attacks

  • Incidents
  • By Lucian Constantin
  • September 29th, 2009
XSS Worm Hits Reddit

XSS Worm Hits Reddit

Proof of concept gone bad

  • Incidents
  • By Lucian Constantin
  • September 24th, 2009
Flash-Based Social Networking Worm Rampages on LiveJournal

Flash-Based Social Networking Worm Rampages on LiveJournal

Steals email addresses and lowers privacy settings

  • Incidents
  • By Lucian Constantin
  • September 12th, 2009
RBS WorldPay Websites Riddled with Security Holes

RBS WorldPay Websites Riddled with Security Holes

The company downplays their seriousness

  • Security
  • By Lucian Constantin
  • September 7th, 2009
Vulnerabilities Found in Four More Top 20 Facebook Applications

Vulnerabilities Found in Four More Top 20 Facebook Applications

As security researcher moves further down on the leaderboard

  • Security
  • By Lucian Constantin
  • August 27th, 2009
Fix for Twitter Critical Bug Easily Bypassed

Fix for Twitter Critical Bug Easily Bypassed

Implemented input validation fails miserably

Critical Twitter Bug Discovered

Critical Twitter Bug Discovered

Opens up endless attack possibilities

New Chinese Social Networking Worm Discovered

New Chinese Social Networking Worm Discovered

Propagates on Renren as a Pink Floyd music video

Adobe Fixes XSS Vulnerabilities in ColdFusion and JRun

Adobe Fixes XSS Vulnerabilities in ColdFusion and JRun

Critical security updates have been published for two Adobe platforms

 
Want more? Browse: