Security consultant Benjamin Mussler last week warned that the Kindle e-book library had a cross-site scripting vulnerability. It appears Amazon previously had fixed the XSS flaw but two months ago ...

The US Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) are urging organizations to focus on eliminating cross-site scripting vulnerabilities in ...

Adam Stone writes on technology trends from Annapolis, Md., with a focus on government IT, military and first-responder technologies. The Department of Homeland Security has warned federal agencies ...

Google has resolved an XSS vulnerability in Gmail described by the tech giant's own team as "awesome." On Monday, Michał Bentkowski, Chief Security Researcher at Securitum, disclosed the vulnerability ...

Netflix released Sleepy Puppy, a cross-site scripting payload management framework, to open source. The tool finds XSS vulnerabilities in secondary applications. Most automated scanning and security ...

Critical API security flaws have put millions of users at risk for account takeover, by using a modern authentication standard to resurrect a longtime vulnerability. The bugs were found in the Hotjar ...

Adobe has released an update for Flash player to counter a cross-site scripting vulnerability, just days after its release. The vulnerability (CVE-2011-2107), rated ‘important’ by Adobe, affects Flash ...