Sejanus
Marketing Abacus 2007-AC1
Fabrice Tourre Testifies
A Loss of SecurityFocus
Give this Man a Haircut and Support a Worthwhile Cause
WinPE 3.0 & Forensics
XSS Flaw on Paypal.com
Bad Password Management Will Stop You in Your Tracks
The Proliferation Of Scareware Hits Home
IEPeers - A New Internet Explorer Zero Day Vulnerability
March’s Patch Tuesday
Press F1 for Help, pwned.
Microsoft’s Google Attack Patch?
A Brief Reminder, Passwords Have Been Around Forever
Was the Austin Plane Crash Domestic Terrorism?
The Real Founding Fathers
February’s Patch Tuesday
So calm down with the WordPress crying (yes, its basically a dropper) as it may let an unrelated vulnerability off the hook.
Congressional Hacks: John Boehner and Nancy Pelosi want to know what happened.
Congressional Web Site Defacements Follow the State of the Union
Umm TechCrunch? Defacement Two in 24 Hours
TechCrunched - TechCrunch the Victim of a Defacement
Youtube: Aurora Vulnerability Exploit (Attack on Google/Adobe)
"Earlier today this entry from yesterday at Wepawet (an online analysis engine for malware) was pointed out to H.D. Moore, and within hours Metasploit has an exploit of the vulnerability integrated. McAfee has confirmed that the exploit is out and the same one they saw during the investigation" Source: http://praetorianprefect.com/archives/2010/01/the-aurora-ie-...
On your second item, here's what McAfee has stated:
"Computer code that exploits the yet-to-be-patched Internet Explorer vulnerability used in Operation Aurora to attack Google and others in December has now been published on the Internet." Source: http://siblog.mcafee.com/cto/%E2%80%9Caurora%E2%80%9D-exploi...