Twitter XSS/XSRF Worm Tom Stripling Add Comment Edit Over the weekend, Twitter was attacked by a JavaScript-based worm that spreads by using a cross-site request forgery (XSRF) attack to updat...