ZDNet

Critical CSRF vulnerability found on Glassdoor company review platform

Glassdoor, a website for job hunting and posting anonymous company reviews, has resolved a critical issue that could be exploited to take over accounts. Bug bounty researcher "Tabahi" (ta8ahi) found ...

Over half a million VKontakte accounts hijacked using malicious Chrome extensions

Five extensions were doing all sorts of malicious acts, including stealing payment data.
Threat Post

Critical Flaws in Khan Academy Opened Door to Account Takeovers

The two critical cross-site request forgery flaws in the online learning non-profit Khan Academy have been resolved. Two critical cross-site request forgery (CSRF) flaws in educational non-profit Khan ...
Ars Technica

Rails - CSRF tokens failing on iPhones?

Has anyone seen any problems with Rails' CSRF protection failing on iPhones?<BR><BR>We've had a couple of reports from users who're are seeing Rails' 422 "change rejected" page, and I can only think ...