Ahhhh...now I feel better. A patch to save me from the bad folks. Always a good thing...

Microsoft revealed on Thursday that it plans to patch Internet Explorer 9 for the first time since its release.

The software giant issued its advanced security bulletin notification for June, which includes a total of 16 bulletins. Bulletin 8, identified only as a critical remote code execution vulnerability, affects Internet Explorer 9 on Windows Vista, WIndows Server 2008, Windows 7 and Windows Server 2008 R2. The bulletin marks the first time that Internet Explorer 9 has been affected by a security flaw.  

Read more about it...

Those bastards! 

To get around phishing blacklists in browsers, scammers are luring people by using HTML attachments instead of URLs, a security firm is warning.

Chrome and Firefox are good at detecting phishing sites and warning Web surfers via a browser notice when they are about to visit a site that looks dangerous. So good, in fact, that scammers are resorting to a new tactic to lure victims into their traps via e-mails--attaching HTML files that are stored locally when they are opened, according to an M86 blog post yesterday. 

news.cnet.com has the article

That's it... all my cash is going BACK into my mattress!

It is like the plot of a Hollywood movie, only the bad guys are definitely winning so far. Earlier this week, the internet security group M86 uncovered a Trojan virus targeting an unnamed financial institution in the UK. The “Zeus Trojan” has already siphoned off over $1 million from over 3,000 British customers between July 5 and August 4, and it shows no signs of stopping.

The thefts were discovered after M86 gained access to the command-and-control server in the Eastern Europe country of Moldova. As for the money, M86 could not give an exact location for where it was going, other than to suggest that it was heading into the former Soviet states- which likely meant that the money was going to the Russian mafia, or another Eastern European gang.

digitaltrends.com has the article

It gets worse and worse damn near daily.

Yet another mass compromise is hitting poorly configured websites, and at least one of the afflicted is a security site that plays up its prowess in warding off the very type of attack it has been smitten by.

At least 17 pages on idera.com were hit by a quick-moving SQL injection attack on Friday, including one titled “Understanding SQL Server Security Options,” according to this [1] Google search.