The Web Hacking Incidents Database (http://whid.webappsec.org), or WHID for short, is a Web Application Security Consortium (http://www.webappsec.org) project dedicated to maintaining a list of web applications related security incidents. WHID goal is to serve as a tool for raising awareness of the web application security problem and provide information for statistical analysis of web applications security incidents. To continuously learn about new incidents, subscribe to the WHID RSS at http://whid.webappsec.org/whid/rss. The following incidents where added to WHID last week: * WHID 2009-31: Double Clickjacking Worm on Twitter http://whid.webappsec.org/whid/2009/31/twitter_clickjacking The 1st Clickjacking incident, but far from the being the 1st Twitter incident * WHID 2009-30: Sage SaaS Withdrawn Due to Security Flaws http://whid.webappsec.org/whid/2009/30/sage_saas_vulnerable Cloud computing gets to the center of the stage, security-wise. * WHID 2009-29: FBI & Secret Service warn of a sophisticated HSM attack http://whid.webappsec.org/whid/2009/29/HSM_Attack An intriguing report on a highly sophisticated attack. Does somebody knows which attack it is? * WHID 2009-28: Serious Leakage on Mac clone Maker's site http://whid.webappsec.org/whid/2009/28/mac_cloner_leaking * WHID 2009-27: Panasonic Products for Cheap http://whid.webappsec.org/whid/2009/27/panasonic_uk_hacked ~ Ofer Ofer Shezaf [shezaf@xxxxxxxx, +972-54-4431119, www.xiom.com] Founder, Xiom.com, Proactive Web Application Security, http://www.xiom.com Leader, WASC Web Hacking Incidents Database Project Chairman, OWASP Israel
