Why decades-old attacks still work, and why that should worry you

For all the attention given to advanced threats and AI-driven attacks, many successful breaches still rely on techniques that have been around for decades.

SQL injection has been studied and discussed for more than 20 years, yet more than 20% of organizations are still vulnerable when first assessed, and the technique continues to account for a meaningful share of modern vulnerabilities.

Cross-site scripting (XSS) is another long-standing example. It allows attackers to inject malicious scripts into web applications, enabling data theft, session hijacking, and unauthorized actions on behalf of legitimate users.

The technique has persisted since the late 1990s and continues to appear in modern applications, including those built on frameworks that claim to mitigate it by default.

If the industry has spent so much time addressing decades-old attacks, why do they still succeed? The answer has less to do with awareness and more to do with how modern...

Copyright of this story solely belongs to techradar.com. To see the full text click HERE