Google Search Device Flaw Leaves Sites Open to Phishing Attacks
Ericka Chickowski writes on SC Magazine Online:
Hackers and security experts made public a vulnerability in Google's search appliances that is leaving hundreds of major organizations such as the U.S. Food and Drug Administration, Stanford University and the National Hockey League open to phishing attacks.More here.
The flaw exposes websites that use Google Search Appliance and Google Mini devices. It is a cross-site scripting (XSS) error in the systems' Unicode Transformation Format (UTF) character encoding that makes it possible for hackers to create malicious links that appear to point to trusted sites.
posted by Fergie @ 11/28/2006 02:20:00 PM
0 Comments:
Post a Comment
<< Home