McAfee Gets Worked. Hard.

Security software maker McAfee is an industry laughing stock following the disclosure of embarrassing security vulnerabilities in its websites.

A Cross Site Request Forgery (CSRF) vulnerability uncovered in McAfee's "secure" vulnerability scanning portal would have allowed attacker to take control of client accounts.

To fall victim to such an attack the target would have to be logged in to their McAfee account and browse to a malicious website that exploited the CSRF bug.