Watch this - the funniest spam video youll ever see [VIDEO]
"We all want our friends and family to learn more about how better to
secure their computers. But the eternal challenge is how can we make the
advice interesting and engaging for a non-techie audience, and not make the
mistake of endlessly droning on using buzzwords they are unlikely to
understand. The video below about spam - made by the folks at "Glove and
Boots" - manages to make what could be a tremendously dry topic, funny and
informative instead...."
http://nakedsecurity.sophos.com/2012/09/05/funniest-spam-video/
Bugtraq: Cross-Site Scripting (XSS) in Kayako Fusion
"While researching how to successfully mitigate the recent Java 7
vulnerability (VU#636312, CVE-2012-4681), we (and by "we" I mean "Will
Dormann") found quite a mess. In the midst of discussion about exploit
activity and the out-of-cycle update from Oracle, Id like to call attention
to a couple other important points. First, theres the question of the
defensive value of the Java 7u7 update (and patching in general)...."
http://www.cert.org/blogs/certcc/2012/09/java_7_attack_vectors_oh_my.html