Although a man-in-the-middle attack could exploit the basic workings of AJAX, it's more likely attackers would plant mean-spirited functionality on a server and then direct the client to it, resulting in the unintentional download of malicious code.
Is AJAX a security risk? Probably. But let's not drag Web services through the mud just because AJAX is one of today's most commonly used SOA clients.
5 Top Federal Initiatives For 2015As InformationWeek Government readers were busy firming up their fiscal year 2015 budgets, we asked them to rate more than 30 IT initiatives in terms of importance and current leadership focus. No surprise, among more than 30 options, security is No. 1. After that, things get less predictable.