Toluu : WinIT Security

MD5 Collisions Put PKI At RiskDecember 31 2008: A new paper outlines how it's possible to use MD5 collisions to spoof a legitimate certificate authority's certificate, which means you could spoof the security of nearly any site - even banks.
Remote Code Execution in SQL ServerDecember 30 2008: If you haven't already seen it, Microsoft issued an advisory regarding a remote code execution vulnerability in versions of its database server.
Wordpress 2.7 Released: Watch Out For Automatic UpgradesDecember 11 2008: Wordpress 2.7 has been released complete with a new administration interface and spiffy new "automatic upgrade" features that are bound to break high security sites.
Malware Fiesta Attracts and Infects ThousandsDecember 10 2008: An automated malware infection tool called Fiesta is highly successful when it comes to infiltrating systems that use Internet Explorer.
A Slew of Patches Plus Two Zero-day ExploitsDecember 9 2008: Microsoft unleashed 8 security patches today and the bad guys unleashed 2 new zero-day exploits that are now floating around in the wilds of the Internet.