Cross-site scripting - Geek Feed

CISA urges software devs to weed out XSS vulnerabilities

September 18, 2024September 18, 2024 geekfeed0Tagged CISA, Cross-site scripting, FBI, Secure by Design, software, vulnerability, Warning, xss

CISA and the FBI urged technology manufacturing companies to review their software and ensure that future releases are free of cross-site scripting vulnerabilities before shipping. The two federal agencies said that XSS vulnerabilities still plague software released today, creating further exploitation opportunities for threat actors even though they’re preventable and should not be present in […]

2 mins read

1 million HotJar users vulnerable to XSS attacks

July 30, 2024July 30, 2024 geekfeed0Tagged Account takeover, Cross-site scripting, cybersecurity, HotJar, OAuth vulnerability, XSS attacks

By combining OAuth features with an age-old cross-site scripting (XSS) vulnerability, Salt Labs researchers were able to take over any account in HotJar and Business Insider online services. Because HotJar serves more than 1 million websites, including, Adobe, Microsoft, T-Mobile, and Nintendo, security pros considered the issue serious, even though many protections were layered into […]

3 mins read