Forum Moderators: open
The article didn't revealed further information and the editors of the site said they didn't know more than its written online.
News story (hope it's fine to post news site):
[it-observer.com...]
There are, however, no greater security concerns using AJAX than any other form of communication between user and server (such as a contact form or other dynamic content).
Whenever designing any form of dynamic functionality one should take care to ensure that it performs as expected without opening up possible points of breach. The best way of doing this is, contrary to fairly common belief, to ensure that the particular functionality only responds to requests that were sent as expected; not trying to handle/account for requests that can be malformed. If you flat out ignore malformed requests there is less of a possibility for security problems, since you can impossibly anticipate all forms of anomalies.