Web Hacking Roundup

It was another fun week in the world of web hacking. First, there was another URI exploit uncovered by security researchers Billy Rios and Nathan McFeters. It turned out to be more serious than originally thought, according to Computer World.

URI issues have been front and center since a bug discovered last month by Thor Larholm, another security researcher.

And then, there were malware-infected greetings sent by e-mail and, to top it off, the Clpwn web-defacing gang surfaced. Boy, web defacements sure bring back memories. I didn't think anybody did that for fun any more. Now, it's all for money and XSS has replaced defacement.

Here's a link to the outstanding blog by Billy Rios on web application security.