Researchers have released software that exposes private information andexecutes arbitrary code on sensitive websites by exploiting weaknesses in the widely used web development technology JavaServer Faces. Six members of a Ukrainian cybercrime ring were charged this week after they allegedly tried to illegally access the networks of a number of financial institutions. A new variant of the Citadel banking malware was discovered, this one delivering localized content for European targets that include not only banks but major ecommerce sites such as Amazon.com. Read the full article.
Source: https://threatpost.com/tool-expoits-data-flaws-javaserver-faces-060810/74073/