A list of real web application hacking stories

Jeremiah Grossman has posted an outstanding list of article describing, or at least referring to, real security incidents involving web application vulnerabilities. This is possibly the best available list in existence.

Tags: infosec