[Osiris]

Google Gadget Malware Coming

At the Black Hat Conference on Aug. 6, two security experts plan on demonstrating a zero-day vulnerability that affects Google Gadgets. Called “Gmalware,” it exploits Gadget vulnerabilities like information theft, content spoofing, and authentication issues. What’s annoying is that they told Google about it and Google didn’t do anything about it.

"We alerted them to that and what they came back with was this is the expected behavior of this domain," said Hansen. "Both Tom and I found that to be a fairly contentious attitude. We alerted them to it and they decided not to fix it and now we're just demonstrating what we found."