Security researchers highlight new database attack

Database insecurity has been a recurring theme at the annual Black Hat conference, and this year is no exception. Among year's presentations, researchers from Core Security Technologies demonstrated a new attack technique cyberthieves could exploit to steal credit card and Social Security numbers.

Damian Saura and Ariel Waissbein, two researchers from the penetration testing technology firm, showed off a technique attackers could use to gain the access rights of legitimate users and steal confidential data without having to exploit a specific software flaw.

The article continues at http://www.computerweekly.com/Articles/2007/08/01/225936/security-researchers-highlight-new-database-attack.htm