Tag file-based session persistence flaw.

The attack is dead simple to execute and requires no authentication, the researchers note.  ​ Read More  ​