DOM-based attacks are a misunderstood, serious, and pervasive source of risk in contemporary web applications. The language that drives the web, JavaScript, is easy to understand and hard to master; ...

In cyber security, attention is concentrated on the new -- zero-day exploits, for example, are big news and big business. But old threats can still cause big problems for organizations, even when the ...

A new type of cross-site scripting (XSS) attack that exploits commonly used network administration tools could be putting users' data at risk, a researcher says. Tyler Reguly, lead security research ...

Adobe today patched a DOM-based cross-site scripting vulnerability in the Adobe Analytics AppMeasurement for Flash library. Adobe today patched a vulnerability in the Adobe Analytics AppMeasurement ...

Wix websites are vulnerable to reflective DOM cross-site scripting attack that could give attackers control of user’s websites. Update Cloud-based web host Wix.com is vulnerable to a DOM-based ...

Cross-site scripting flaws are the most prevalent vulnerabilities found in Web applications, posing a risk to data and intellectual property, according to a study of thousands of applications by ...

Even the most trustworthy-looking website could trick you into giving up personal details through cross-site scripting. Here’s what you need to know about XSS attacks. It’s easy to become convinced of ...

Gallup, the well-known international market research company, has moved to block security flaws on its website. The cross-site scripting (XSS) vulnerability could have exposed personal data or been ...

Security researchers have found eight serious cross-site scripting (XSS) flaws in Azure HDInsight, a big data processing service powered by open-source technologies like Apache Hadoop, Spark, Hive and ...

A major airline suffered a data breach involving a cross-site scripting attack. Learn how it happened and how you can protect your organization. Researchers from RiskIQ have published details on the ...