Researchers from Google and a well-known security firm have documented serious vulnerabilities in Adobe Flash content which leave tens of thousands of websites susceptible to attacks that steal the personal details of visitors.
The security bugs reside in Flash applets, the ubiquitous building blocks for movies and graphics that animate sites across the web. Also known as SWF files, they are vulnerable to attacks in which malicious strings are injected into the legitimate code through a technique known as cross-site scripting, or XSS. Currently there are no patches for the vulnerabilities, which are found in sites operated by financial institutions, government agencies and other organizations.
Its amazing that with all this vulnerabilities, how does insecure sites like USTREAM.TV and STCKAM.TV actually still functioning? If so are they infected too? If they are, then how many clients machines have they infected? It is getting scary out there, even for protected systems. in fact, the question is: Who is 'really' protected? No one?
No comments:
Post a Comment