Massive Internet security flaw uncovered

Security researchers on Tuesday said they had discovered an enormous flaw that could let hackers steer most people using corporate computer networks to malicious websites of their own devising. For bad news, that's pretty impressive. But there are two pieces of good news: First, no bad guys are known to be using the flaw yet. And second, in a possibly unprecedented display of industry cooperation, virtually every major software company affected is issuing patches to fix the problem. System administrators will have 30 days to apply those patches before the details of the flaw are disclosed. Security experts hope that the patches are broad enough that evil types won't be able to reverse-engineer them to exploit the vulnerability.
http://www.latimes.com/business/printedition/la-fi-techblog9-2008jul09,0,4270393.story
(requires registration)