A cross-site scripting (XSS) vulnerability on eBay's website that could have been exploited by spearphishers "to steal funds from people, use trusted eBay accounts to scam other users, and more," according to an independent researcher.
Gmail has added an icon next to verified emails coming from PayPal and eBay to signify they are not spam or phishes, Brad Taylor, Gmail spam czar, said in a blog post Monday. The "authentication icon for verified senders," which must be turned on by Gmail users by visiting the "Labs" tab under "Settings," will cause a key icon to appear next to legitimate messages coming from PayPal and eBay. Google soon hopes to extend the same protection to other popular senders, Taylor said. — DK