Security

Microsoft confirms first Windows 7 zero-day bug

Company urges users to block ports until a patch is ready, but the workaround cripples browsers

Spam

Consumer modems are worsening DNS problem linked to DDoS attacks

As more consumers demand broadband, ISPs are rolling out modems configured to accept DNS queries from all sources, including hackers

Online fraudsters use spam campaign to target payment transfer system

Messages warn of an ACH transfer problem and try to get users to install the Zeus malware

Web site scripting flaws are common and slow to be fixed

Security consultant says two-thirds of sites are vulnerable to cross-site script attacks, and about half are never fixed

Beware ‘frighteningly bad’ Flash flaw, say researchers

The flaw allows hackers to hijack sites, putting most sites and users at risk

Apple issues week’s second patch set, fixes 7 Safari flaws

Windows users get patch that Mac OS X Leopard users received more than two months ago

Java, BlackBerry get critical security fixes

Sun released a critical update to its Java Runtime Environment and RIM patched the software used to sync data between the BlackBerry and a PC

Hackers will exploit Windows kernel bug

Drive-by attacks against IE users will come soon, experts say

New iPhone malware steals data from jailbroken phones

This malware has more severe consequences for iPhone users than an unwanted reminder of singer Rick Astley