Security researchers highlight new database attack
August 1, 2007[From ComputerWeekly]
Database insecurity has been a recurring theme at the annual Black Hat conference, and this year is no exception. Among year's presentations, researchers from Core Security Technologies demonstrated a new attack technique cyberthieves could exploit to steal credit card and Social Security numbers.
Damian Saura and Ariel Waissbein, two researchers from the penetration testing technology firm, showed off a technique attackers could use to gain the access rights of legitimate users and steal confidential data without having to exploit a specific software flaw.