75% of Banking sites are vulnerable

Zdnet reports of a study caught attention of me. According to it 75% of banking sites are vulnerable to attacks. These are not due any major OS or Firewall flaws but due to very simple application flaws. For example flaws like placing secure logins in insecure pages, putting contact info in insecure pages, redirecting without user consent etc. This comes at a point where banks are spends a lot of money to prevent attacks like phishing. If user computer is installed with malware nothing more can be done unless these flaws are fixed. The link to full report is given at the end.

view full report