Cross-site request forgery (CSRF) attacks are becoming more sophisticated, but there are many ways you can prevent them.

A CSRF attack is a serious Web security threat that, combined with XSS, can be lethal. Learn about the CSRF attack’s anatomy, along with mitigation methods.

French researcher Kafeine has found an exploit kit delivering cross-site request forgery attacks that focus on SOHO routers and changing DNS settings to redirect to malicious sites.

Unlike an XSS attack, which tricks the site into uploading malicious code, CSRF simply has the site execute legitimate commands–just not commands issued by the user.

CSRF attacks involve placing malicious code on a website to force visitors’ browsers to send specially crafted requests to a third-party URL.

The flaws were discovered by researchers from security consultancy outfit Nightwatch Cybersecurity and leave many Asus router models exposed to cross-site request forgery (CSRF) attacks.