web application security

Google is continuing its incursion into the security world with the release of its passive Web-application security assessment tool, Ratproxy. The tool differs from most of the other Web app security tools in that it does not actively crawl applications looking for common security problems. Instead, it passively monitors the interactions between a browser and [...]  read more »

Researchers at Cenzic discovered a vulnerability in Yahoo Mail they said could allow attackers to steal Yahoo identities and potentially access users’ sensitive information.The company, a Web application security provider based in Santa Clara, Calif., notified Yahoo of the cross-site scripting flaw in its popular Web mail program on May 23 and Yahoo fixed it [...]  read more »

Consolidation continued at a rapid clip with the data loss prevention and Web application security markets seeing the most activity