Information freedom for open source users.

If you were walking into a store and got mugged, would you immediately assume that it was the store’s fault or the mugger’s? What if you visited a Website and immediately got hit with malware? The two situations are essentially the same, but in the latter case, most people would blame the venue rather than the attacker. In the online world, however, Google’s Safe Browsing service is pointing fingers at the attack venue, not the assailant.

Where are the greatest Web-related security threats today? Analysis of Web Hacking Incidents Database (WHID) reveals that in 2009 social networks were at the greatest risk, malware and defacement remained the most common outcome of Web attacks, and SQL injection was the most common attack vector. Here’s a deeper dive on the findings and what you can do about them.

The number of security flaws being found in Web applications continues to grow and will likely dominate the security agenda for years to come, according to a report by application security vendor Cenzic.