A newly discovered web security vulnerability is putting internet users in New York and beyond at serious risk.