XSS vulnerabilities are a 30-year-old security flaw that won’t go away. Recently, CISA and the FBI sounded the alarm on cross-site scripting – but why now? And could AI make the problem even worse?

Shane Fry, CTO at RunSafe Security, and industry experts weighed in on the issue in CSO Magazine. Read the article here.

Key Takeaways:

• CISA and FBI have issued an alert urging tech manufacturers to address cross-site scripting (XSS) vulnerabilities, a persistent web security issue that has plagued the industry for nearly 30 years.
• XSS vulnerabilities continue to be a problem due to human error, prioritization of functionality over security, coding complexity, and the use of older frameworks lacking built-in protections.
• AI models trained on existing code repositories may inadvertently perpetuate and spread XSS vulnerabilities in newly generated code, potentially exacerbating the problem in future software development.