> The software company said it discovered and fixed the breach in October. Disgusting, how was this buried for 6 months? > The Atlanta-based airline said that

> The software company said it discovered and fixed the breach in October. Disgusting, how was this buried for 6 months? > The Atlanta-based airline said that it wasn’t sure whether customers’ information was actually compromised by malware that it believes was in software used by (24)7.ai, which provided the airline with online chat services for customers, for about two weeks. Your website, your liability. This is Delta's fault. By letting third-party Javascript execute on your webpage, that's basically a remote code execution right there. That's like giving an outside company root on your database, or domain controller. Maybe this will serve as a wake-up call for web devs, instead of piling more and more terrible JS onto a page.