Unity Web Player Zero-Day Vulnerability Disclosed

Some detail has been disclosed about a zero-day vulnerability in the Unity Web Player browser plugin that can allow an attacker to use a victim’s credentials to read messages or otherwise abuse their access to online services. The partial disclosure was made after nearly six months of bug-report...

Security Best Practice: Protect Yourself from Cross-Site Scripting Attacks

'Cross-site' refers to the security restrictions that the client browser usually places on data i.e. cookies, dynamic content attributes, etc. associated with a web site. By launching a cross site scripting attack, an attacker bypasses these security restrictions, which may result in anything fro...