The popular social news site Reddit was breached with an XSS exploit. Of course, the article does not indicate what, if any, protection methods Reddit was using to prevent this most popular of web site exploits. I wonder how they would do if an auditor showed up tomorrow using CSIS's Twenty Critical Cyber Security Controls (I previously posted) as a reference.
Search
Categories
- Advanced Persistent Threat (APT)
- Application Security
- Authentication
- Books
- Botnets
- Breaches
- Compliance
- Cyberwar
- Data Loss Prevention
- Database Activity Monitoring
- Disk Encryption
- Funds Transfer Fraud
- Health Care
- HIPAA
- Identity Theft
- Innovation
- IT Security 2.0
- Legal
- Log Management
- Malware
- Network Security
- Next Generation Firewalls
- Phishing
- Privacy
- Research
- Risk Management
- Secure Browsing
- Security Information and Event Management (SIEM)
- Security Management
- Security Policy
- Security/Compliance Portfolio Management
- Social Engineering
- Steganography
- Theory vs. Practice
- Top Stories
- Trade Secrets Theft
- User Activity Monitoring
- Vendor Liability
- Voice over Internet Protocol
- Web 2.0 Network Firewalls
- Web Application Firewalls
« All enterprises have infected hosts controlled by botnets | Main | Twitter is dead »
Wednesday, 30 September 2009
TrackBack
TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a01157148a11a970c0120a5a60965970b
Listed below are links to weblogs that reference Popular social news site infected with XSS exploit:
The comments to this entry are closed.
Recent Posts
- HoneyBot - Automated IRC Social Engineering
- The End of Malware? Hardly.
- Massive iPhone Security Issue
- Tabnabbing - a new variation on phishing
- Identity theft the old-fashioned way
- Heartland settles with MasterCard for $41 million
- LifeLock's CEO's Identity Stolen 13 Times - Who's fault?
- Heartland breach expenses reach $139 million - so far
- Simplistic attacks still work some of the time
- New attack bypasses all tested anti-virus products
My Favorite Books on Risk and IT Security
Peter L. Bernstein: Against the Gods: The Remarkable Story of Risk
Bruce Schneier: Beyond Fear: Thinking Sensibly About Security in an Uncertain World.
George Westerman: IT Risk: Turning Business Threats into Competitive Advantage
David Apgar: Risk Intelligence: Learning to Manage What We Don't Know
Bruce Schneier: Secrets and Lies: Digital Security in a Networked World
Andrew Jaquith: Security Metrics: Replacing Fear, Uncertainty, and Doubt
Nassim Nicholas Taleb: The Black Swan: The Impact of the Highly Improbable
Douglas W. Hubbard: The Failure of Risk Management: Why It's Broken and How to Fix It
Clayton M. Christensen: The Innovator's Prescription: A Disruptive Solution for Health Care
Benoit Mandelbrot: The Misbehavior of Markets: A Fractal View of Financial Turbulence
Comments