[ UPDATE: Microsoft plans to ship an XSS filter update in June 2010to fix what is hopefully the last attack scenario ] The cross-site scripting filter that ships with Microsoft's Internet Explorer 8 ...

[ Security gone awry: IE 8 XSS filter exposes sites to XSS attacks ] Microsoft shipped two separate updates recently -- MS10-002 and MS10-018 -- with defense-in-depth changes that addressed the bulk ...

eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. Microsoft is planning an update to the cross-site ...

There is a bug in the anti-cross site scripting filter in Chrome and Safari that enables an attacker to bypass the filter in some cases and use an XSS flaw on a given site to compromise visitors’s ...

David Lindsay, a researcher at software security company Cigital, presented a paper entitled 'Abusing Internet Explorer 8's XSS Filters' at the Black Hat conference in Barcelona, Spain. The pair ...

Microsoft will wait until June to release an additional patch for an Internet Explorer vulnerability that was recently demonstrated at the Black Hat EU conference. Speaking on the Microsoft Security ...

On the heels of a Black Hat EU presentation that exposed security problems with the cross-site scripting (XSS) filter in Internet Explorer 8, Microsoft plans to ship an update to the filter to fix ...