There was an attack in black hat recently called HEIST I believe that could target users via issuing a special cookie (say, through an advertisement). The only known way to combat it is to turn off third party cookies.