AJAX and Security

AJAX is everywhere. No AJAX, no cool website. Well, interactive behaviour is mandatory; I do agree. But is anybody investigating what AJAX means for web application security? I did some research. More on this later this week.