The US Department of Homeland Security will release a new guidance document today intended to make the software that runs the Web less susceptible to malicious hacks.
The DHS has teamed with security and technology experts to create a list of the top 25 programming errors that lead to the most serious hacks, according to The New York Times. The idea is to educate companies and organizations about the channels that criminal hackers use to gain access to confidential information and servers. These are often common software errors that can lead to “zero day” exploits.
According to the Times, the number one error on the list is a programming mistake that can leave a server vulnerable to SQL-injection attacks like those LulzSec and Anonymous have used to access supposedly secure information.
For more, see this interesting blog piece.

