SQL injection attack

Over 1 million webpages were infected in the course of an attack that can expose users to malware exploits. Among these websites there are at least two that belong to Apple. The SQL injection attacks bombard the websites of legitimate companies with database commands that attempt to add hidden links that lead to malware exploits.

IBM's annual X-Force Trend and Risk Report revealed that the number of software vulnerabilities dropped in 2009 with the number of flaws in document readers and multimedia applications up 50%.

X-Force research and development team deals with the vulnerability disclosures and collects other data on Web-based attacks. Thus, last year the team recorded 6,601 new vulnerabilities, a 11% drop from the previous year.