clickjacking

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Web 2.0 Expo: Top ten Web hacking techniques

A large portion of the Web 2.0 Expo attendees are focused on content. They want to create better, more engaging content for social media programs and Web engagement with their customers. But the Web and application developers behind this content need to know how to secure it. This is what...

Tags: Technique, Web, Web 2.0, Hacking, Attacker, Attack, Clickjacking, Channel Management, Security, Marketing, Jennifer Leggio

Blog posts 2009-04-01

Firefox + NoScript vs Clickjacking

Firefox + NoScript vs Clickjacking"near impossible to fix properly"That sounds very promising to those who want to build online apps on top of HTML. NOT.RE: Firefox NoScript vs ClickjackingIf the “noscript” plugin might help prevent some exploits, what about the script-defeating mechanism in WebWasher Classic (a free program...

Tags: Web browsers, Chrome, US-CERT, domain, NoScript, Clickjacking, Mozilla Firefox

Discussion threads 2008-09-25

Clickjacking: Researchers raise alert for scary new cross-browser exploit

Clickjacking: Researchers raise alert for scary new cross-browser exploitText or graphicremember there use to be a link on web pages if you wanted text only or graphics.that should be put back in placein the wild?"Zero-day" means that the exploit was being used in the wild before a patch was released...

Tags: Web site development, Web browsers, exploit writer, Clickjacking, exploit

Discussion threads 2008-09-25

Additional Resources

IE8 outperforms competing browsers in malware protection -- again

Well the credibility of the test is extremely...suspect since the winner is also the sponsor, why even print it. Well I guess according to these resultsNon-IE users are more gullible than IE users, but otherwise IE and Firefox are statistically tied.Another MS "study" proves that MS is...

Tags: Web browsers, Cyberthreats, Spyware, adware & malware, Common-sense, IE8, malware protection, Web browser, Microsoft Internet Explorer, malware, Mozilla Firefox, Chrome

Discussion threads 2009-08-19

IE8 outperforms competing browsers in malware protection -- again

A recently released study by NSS Labs is once again claiming that based on their internal tests, Microsoft's Internet Explorer 8 outperforms competing browsers like Google's Chrome, Mozilla's Firefox, Opera and Apple's Safari in terms of protecting their users against "socially engineered malware" and phishing attacks. Not...

Tags: Malware, Microsoft Internet Explorer, Web Browser, IE8, Spyware, Adware & Malware, Cyberthreats, Viruses And Worms, Security, Dancho Danchev

Blog posts 2009-08-19

Mozilla tackles XSS vulnerabilities with new technology

Mozilla's security engineers are working on new technology that promises to mitigate a large class of Web application vulnerabilities, especially the cross-site scripting XSS plague against modern Web browsers. The project, called Content Security Policy, is designed to shut down XSS attacks by providing a mechanism for...

Tags: Vulnerability, XSS, Web Browser, Mozilla Corp., Web Browsers, Internet, Ryan Naraine

Blog posts 2009-06-22

Apple Safari jumbo patch: 50+ vulnerabilities fixed

Apple has shipped a whopper of a Safari browser update to fix more than 50 vulnerabilities, some rated extremely critical. The latest fixes, available in the new Safari 4.0, corrects a wide range of code execution and denial-of-service vulnerabilities and even comes with a fix for the...

Tags: Apple Safari, Vulnerability, Apple Inc., Web Site, Web Site Development, Web Technology, Security, Internet, Ryan Naraine

Blog posts 2009-06-08

Financial Fraud and Internet Banking: Threats and Countermeasures

To reach the gullible as well as the experienced, cybercriminals are developing new attack methods and new traps. One example is clickjacking. Also known as UI redress attack, this web-related structural weakness can fool users when they view a web page made of two layers. While users believe they are...

Tags: Internet, Financial, Internet Banking, Layer, Fraud, Security

White papers 2009-04-01

Study: IE8's SmartScreen leads in malware protection

Study: IE8's SmartScreen leads in malware protectionWhaaaaat?"does it really matter that IE8?s outperforms the rest of the browsers in times when IE8 users are downgrading to IE7?"So, IE8 quickly picked up adoption throughout the week-end and suddently on monday it drops.I would expect that from Informationweek (who are actually behind...

Tags: Spyware, adware & malware, Cyberthreats, Viruses and worms, SECURITY, Web browsers, IE8, malware protection, malware, SmartScreen lead, SmartScreen

Discussion threads 2009-03-24

Adobe: Full-featured Flash 10 coming to a smartphone near you; Apple stand-off continues

Adobe: Full-featured Flash 10 coming to a smartphone near you; Apple stand-off continuesFlash is running too slow on the device to be usefulsaid Jobs. Heck, it even runs slooowly on a fully grown desktop computer! And I can imagine Flash lite taking away too much.So what to do? I think...

Tags: Smart phones, Cellular phones, Corporate communications, Handhelds, Aesop, Flash Lite, Apple Inc., Adobe Systems Inc., smart phone, Full-featured Flash 10

Discussion threads 2009-02-16

Twitter's active users grow 900% in one year

Twitter is growing at a phenomenal rate, according to an employee post on the Twitter blog. Just how phenomenal? Try this: Active users have increased 900% in a year, and two times the traffic that Twitter's website receives heads to Twitter's APIs -- meaning that far more...

Tags: Blog, Twitter, Tweeters, Blogging, Internet, Andrew Nusca

Blog posts 2009-02-13

News to know: Stimilus bill, Twitter Twestival, Microsoft stores, Netflix, Facebook value

Here are today’s notable headlines. You can get News To Know via email alert and RSS daily .  For continuous updates see BNET’s around-the-Web tech coverage Andrew Nusca: Broadband tax credit cut from stimulus bill Sam Diaz: Tech will see direct, indirect benefits from...

Tags: NetFlix Inc., Facebook, Larry Dignan, Dana Blankenhorn, Mary Jo Foley, Apple Inc., Microsoft Corp., Twitter, Sam Diaz, Service-Oriented Architecture (SOA), Retail, Personal Finance, Microsoft Outlook, Taxes, E-mail, Strategy, Web Services, Enterprise Software, Software, Microsoft Office, Office Suites, Financial Planning, Finance, Online Communications, Management

Blog posts 2009-02-13

Twitter and the dangers of clickjacking

Twitter and the dangers of clickjackingMore InformationI provide some technical details and a demo that shows how it works for anyone who is interested:http://shiflett.org/blog/2009/feb/twitter-dont-click-exploitClickjack could really screw up DTVYou'd never get the correct channel.Could you imagine purchasing firewall equipment for your Television?"Today DTV just got hit by a Malware Trojan...

Tags: TVs, TV & Home Theater, Twitter

Discussion threads 2009-02-12

Twitter and the dangers of clickjacking

Right now -- yes, right now, as you're reading this post -- Twitter users are, well, a-twitter about an innocent but indicative joke that some clever person just played on half the Twitterverse. The trick? A simple clickjacking maneuver, sent via a user to his or her...

Tags: Twitter, Productivity, Wiki, Channel Management, Security, Online Communications, Marketing, Andrew Nusca

Blog posts 2009-02-12

ACLs Don't

The ACL model is unable to make correct access decisions for interactions involving more than two principals, since required information is not retained across message sends. Though this deficiency has long been documented in the published literature, it is not widely understood. This logic error in the ACL model is...

Tags: Hewlett-Packard Co., Cloud Computing

White papers 2009-02-06

Google plugs ‘high-risk’ holes in Chrome browser

Google plugs ‘high-risk’ holes in Chrome browserBig Brother (spy-eye) is monitoring you.....With the Google desktop search, google tool bar, google toilet paper you are covered from head to toe monitoring!Plus, ALL of the private data is being scanned and sheep follow it because it is so cool.I use a scrapper...

Tags: E-mail, Social Security, Benefits, Web browser, Google Inc.

Discussion threads 2009-01-29

Flaw exposes Chrome, Firefox to clickjacking

Flaw exposes Chrome, Firefox to clickjackingStonewalling over IE???How about the flaw in IE 6? IE 7?? After all, most users would be on one of those...not IE 8. LOVE how the headline leaves IE out and focuses on Chrome and Firefox.Whoa!Microsoft actually on top of security issues...

Tags: Web browsers, Spyware, adware & malware, Cyberthreats, SECURITY, Viruses and worms, Anti-spyware tool, NoScript, Microsoft Internet Explorer, malware, Mozilla Firefox, Web browser

Discussion threads 2009-01-29

Google: no evidence of a Gmail vulnerability

Google: no evidence of a Gmail vulnerabilityGmail problems ignored by google!Apparently my gmail page was hacked and infected by the clickjacking worm/trojan/bot. After months (April? August to date)struggling with an undetectable (by AV/computer pros) clickjacking problem, I infected a new laptop computer by clicking on the link to my sophos...

Tags: E-mail providers, cloud computing, Google Gmail, Google Inc.

Discussion threads 2008-11-27

Adobe ships fix for clickjacking, clipboard hijack threats

Adobe ships fix for clickjacking, clipboard hijack threatsLooking for a macbook?[b]Apple[/b] says that patch is currently scheduled for early November.What do you have in mind? :PRE: Adobe ships fix for clickjacking, clipboard hijack threatsHave they made 10 any easier to deploy in the enterprise?Just installed it on my Linux systemsI've...

Tags: OPEN SOURCE, Adobe Systems Inc., clipboard

Discussion threads 2008-10-16

News to know: Less is more, Windows 7, Firefox 3.1, Google

Here are today’s notable headlines. You can get News To Know via email alert and RSS daily: Mary-Jo Foley: Microsoft plays up ‘less is more’ as its holiday retail message Deb Perelman: Signs your company might soon go belly-up Christopher Lochhead:...

Tags: Google Inc., Larry Dignan, Mozilla Firefox, Microsoft Windows 7, Dana Blankenhorn, Microsoft Windows, Web Browsers, Network-Attached Storage (NAS), Product Marketing, Operating Systems, Software, Internet, Storage, Hardware, Marketing, Sam Diaz

Blog posts 2008-10-16