Insecure by design The vast majority of US bank websites jeopardize the security of their online customers by including design flaws that expose passwords and are susceptible to tampering by attackers, researchers say.… ...full story at the register (uk)
from the register (uk) on Fri, Jul 25 2008
see also:
| 24 Jul 08 |
|
Most Bank Websites Are Insecure » slashdot Anonymous writes "More than three-quarters of bank Web sites have design flaws that could expose bank customers to financial loss or identity theft, according to a University of Michigan study that will be presented this week at the Symposium on Usable... |
| 13 Jun 08 |
|
Scripting bugs blight security giants' websites » the register (uk) McAfee, Symantec and VeriSign plagued by XSS flaws Security researchers have identified cross-site scripting (XSS) issues on the websites of three IT security heavyweights. Coding flaws on the websites of McAfee, Symantec and VeriSign create a possible... |
| 30 Sep 08 |
|
CSRF Flaws Found On Major Websites, Including a Bank » slashdot An anonymous reader sends a link to DarkReading on the recent announcement by Princeton researchers of four major Web sites on which they found exploitable cross-site request forgery vulnerabilities. The sites are the NYTimes, YouTube, Metafilter, and... |
| 03 Aug 08 |
|
Majority of banking websites found insecure » digg A new study from the University of Michigan has found that more than 75 percent of banking websites are not completely up to snuff when it comes to security. |
| 31 Oct 08 |
|
Security researchers lift the lid on Torpig banking Trojan » the register (uk) 300K bank accounts compromised by backdoor code Security researchers at RSA have uncovered how a banking Trojan may have stolen the login credentials of as many as 300,000 online bank accounts.… |