Wednesday, December 27, 2017

No boundaries for user identities: Web trackers exploit browser login managers

The underlying vulnerability of login managers to credential theft has been known for years. Much of the past discussion has focused on password exfiltration by malicious scripts through cross-site scripting (XSS) attacks. Fortunately, we haven't found password theft on the 50,000 sites that we analyzed.

from Google Alert - vulnerability http://ift.tt/2l7WC7Q
via IFTTT

No comments:

Post a Comment