ANALYSIS – Used by millions of users, RSS is much like instant messaging in that it is predominantly an end-user driven tool that has become invaluable in helping enterprise employees be more productive. Daily news delivered directly to their desktop via RSS feeds.
Now that news (RSS) can be accompanied by viruses or other malicious content. As the ITSecurity.com article points out, security best practices should be applied to RSS in the same manner as other traffic flowing in and out of the network. Additional considerations should include a multi-layered approach of an officially supported and monitored RSS reader along with some level of network monitoring, control and possible inspection. A feat that may be easier said than done due to the unique characteristics that RSS carries.
Click here to view the IT Security article on the hidden security risks of RSS.