Researcher: Security risks in Web services largely ignored
APRIL 07, 2006 (IDG NEWS SERVICE) - VANCOUVER, British Columbia — In their rush to implement Web services, some companies may be exposing themselves to new security risks that they may not fully understand, a security researcher said yesterday.
During a presentation at the CanSecWest/core06 conference, researcher Alex Stamos outlined how a number of Web services technologies, including AJAX and the XQuery query language, could be exploited by hackers to dig up secret information and attack systems.