Microsoft
Here are some of the key reasons why you would want to run Unified Access Gateway with DirectAccess.
Facebook security snafu could compromise accounts
Cross site-scripting flaws becoming a favored vector for hackers
May 23, 2008 12:00 PM ETActive Comments
Fatman says:
XSS flaws are the prime reason I use Firefox with the 'No Script' and 'Ad Blocker Plus' add-ons. Browser user...
eaptai says:
XCBQ9z tkoizmahlzai, [url=http://ikfuylxlpusl.com/]ikfuylxlpusl[/url], [link=http://jnechhhzcyzy.com/]jnechhhzcyzy[/link], (Link to related site.)
IDG News Service - A researcher has spotted a security problem in Facebook that could lead to hackers taking control of user accounts.
The flaw allows a hacker to execute scripts on Facebook that could potentially be used to create a fake log-in page and capture users' passwords, according to the XSSED security blog. The discovery is credited to "Mox."
"Malicious people can exploit this issue to execute script code in the context of Facebook or obtain sensitive information from its users, such [as] clear text authentication credentials with a fake log-in form," according to the blog post, written by Dimitris Pagkalos.
A cross-site scripting vulnerability can let an attacker display data from another Web site or run malicious code, which can compromise user data on the targeted Web site.
Cross-site scripting flaws are increasingly becoming one of the favored vectors for hackers, and security experts have warned that a vast number of Web sites potentially contain the vulnerability. In 2006, the Web Application Security Consortium surveyed 31,373 sites and found that more than 85% were vulnerable to cross-site scripting attacks.
Reprinted with permission from
IDG.netStory copyright 2009 International Data Group. All rights reserved.
Additional Resources
Microsoft
Review how one energy firm tightened protection and simplified IT work using business-ready security solutions.
Sybase
In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.
Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.
Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.
White Papers & Webcasts
Death to PST Files
Download Now
The Tangled Web: Silent Threats & Invisible Enemies
Download Now
Tape Killed the IT Guy
Watch Now
Forrester Consulting Mobility Study: Taking Control of Enterprise Mobile Device Diversity
Download Now
BRM: What You Can Do To Reduce Risk In Challenging Times
Watch this webcast now!
What IT Must Do to Support Employee-Owned BlackBerry, iPhone and Android Mobile Devices
Download Now
Web 2.0, Social Media and the Dark Web - A Web Criminals Paradise?
In this discussion, learn about the challenges of protecting your users from the potentially unsafe content hidden in the "Dark Web".
eGuide: Enterprise Security
Smart Security Strategies for 2010. Read now!
Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...
Computerworld Reports
Sign up to receive updates on the latest Security resources
