Illustration by Mark Todd In May, Web security consultant George Deglin discovered a cross-site scripting (XSS) exploit that involved Facebook’s controversial Instant Personalization feature. The ...

Cross-site scripting (XSS) is a cyberattack in which a hacker enters malicious code into a web form or web application url. This malicious code, written in a scripting language like JavaScript or PHP, ...

Adam Stone writes on technology trends from Annapolis, Md., with a focus on government IT, military and first-responder technologies. The Department of Homeland Security has warned federal agencies ...

Cross-site scripting vulnerabilities have been exploited by attackers since the early 2000s, and XSS has been on the OWASP Top 10 list of critical security risks for web applications beginning in 2004 ...

With the advent of social networking sites, becoming more popular is as easy as crafting a few lines of JavaScript code, it seems. One clever MySpace user looking to expand his buddy list recently ...

In cyber security, attention is concentrated on the new -- zero-day exploits, for example, are big news and big business. But old threats can still cause big problems for organizations, even when the ...

Cross-site scripting (XSS) attacks take advantage of coding flaws in the way websites or web applications generate input from users. Despite their longstanding reputation as a significant infosec ...

Google has released two new tools for developers looking to protect web domains against XSS scripting security flaws. Cross-site scripting (XSS) is a common security issue web developers face today.

In 2011, a group of hackers known as Lulzsec went on a two month rampage hacking into dozens of websites including those owned by FOX, PBS, the FBI, Sony and many others. The group was eventually ...

Cross-site scripting vulnerabilities have been exploited by attackers since the early 2000s, and XSS has been on the OWASP Top 10 list of critical security risks for web applications beginning in 2004 ...