Tuesday, November 28, 2006

Google Search Device Flaw Leaves Sites Open to Phishing Attacks

Ericka Chickowski writes on SC Magazine Online:

Hackers and security experts made public a vulnerability in Google's search appliances that is leaving hundreds of major organizations such as the U.S. Food and Drug Administration, Stanford University and the National Hockey League open to phishing attacks.

The flaw exposes websites that use Google Search Appliance and Google Mini devices. It is a cross-site scripting (XSS) error in the systems' Unicode Transformation Format (UTF) character encoding that makes it possible for hackers to create malicious links that appear to point to trusted sites.

More here.


Post a Comment

<< Home