CSRF Still Armed And Dangerous Cross-site request forgery may not get the same attention as SQLi or XSS, but it still poses considerable risk to Web apps ...

Facebook disclosed today how it has beefed up cross-site request forgery (CSRF) tokens in order to ward off the BREACH attack.

Critical CSRF vulnerability found on Glassdoor company review platform The critical flaw impacted both job seeker and employer accounts on the web domain.

CSRF Vulnerability: A 'Sleeping Giant' A mostly unknown Web vulnerability called Cross-Site Request Forgery could be the next attack vector on your Website ...

The covid certificate site, puts its csrf tokens, nonces etc in it's urls. Isn't this inherently insecure? OWASP says any change of state transactions shouldn't have csrf in the url. This URL is for ...