Browse by Tags

• Ajax
• conferences
• hacked
• iPhone
• JavaScript
• phishing
• Safari

XSS+phishing in Italian bank hack
10 January 08 11:43 AM | Billy | 1 Comments   

Netcraft is reporting today about a phishing attack leveraging XSS against an Italian bank. From the article (emphasis mine) An extremely convincing phishing attack is using a cross-site scripting vulnerability on an Italian Bank's own website to Read More...

Filed under: XSS, phishing, hacked

SPI Labs advises avoiding iPhone feature
16 July 07 03:40 PM | Billy | 18 Comments   

The Apple iPhone’s Safari web browser has a special feature that allows the user to dial any phone number displayed on a web page simply by tapping the number. SPI Labs has discovered that this feature can be exploited by attackers to perform various Read More...

Filed under: XSS, Safari, iPhone

Speaking at Shmoo
22 March 07 05:05 PM | Billy | 5 Comments   

I’m really excited to be speaking at Shmoocon again and especially excited about my presentation this Saturday at 1pm. Javascript Malware for a Gray Goo Tomorrow focuses on the increased scope of damage caused by Cross-Site Scripting (XSS) vulnerabilities Read More...

Filed under: Ajax, conferences, XSS, JavaScript