Scripting backdoor steals secrets

By not validating user input, major Web sites are opening themselves up to the loss of sensitive customer data.

E-commerce, the buzzword of the new millennium, is changing the way we do business. Nothing can beat the convenience and discounts that can be found on the Internet. Then again, if these e-commerce sites don't mend their ways, they might be giving out more then just cheap airfares and cut-rate deals. They could be sending your sensitive data to a malicious user without your permission, and without their knowledge.

KeyLabs tests have verified a security problem that based on our research is affecting about one third of the Internet's biggest Web sites. Because of lax security, these e-biz sites are allowing malicious JavaScript and ActiveX scripts to be run from their site.

So, once again, it's time to remind you to tighten your security belt because we might be in for a rough ride.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Sick of broken tender sites
    Some of the state governments desperately need to invest in more user-friendly tender sites so that looking for information on government tenders doesn't have to be a game of blind man's bluff.
  • Array Cyberwar: What is it good for?
    In this week's episode, Cyberwar. What is Australia's place in the world of digital warfare? What are the implications for the NBN?
  • Array Is wholesale-only backhaul just a pipedream?
    The potential acquisition of Pipe Networks by SP Telemedia has raised the question about whether vertically integrated backhaul providers will mean higher wholesale prices for ISP customers.
  • More blogs »

Tags

Back to top

Featured