Small Businesses Lag in Website Security, Sourcehut Suffers Account Takeover

A recent analysis of 4,688 small-business websites revealed a significant security deficit, with nearly half failing to meet any of seven essential security header criteria. This widespread vulnerability leaves these businesses exposed to various online threats.

In a separate incident, the software development platform Sourcehut experienced an account takeover due to a cross-site scripting (XSS) vulnerability within its ansi2html tool, which processes build logs. This breach highlights the critical importance of securing even seemingly minor components of a system, as they can be exploited to compromise user accounts.