Well, actually we expect some more updates as some security vulnerabilities have been revealed at the Pwn2Own contest during the CanSecWest security conference. Google is the first and pushes out version 10.0.648.133 – which fixes one security vulnerability within WebKit (the base of the Blackberry, Chrome and Safari webbrowsers). As usual, the update is spread via the built-in automatic update mechanism. Users can make sure to use the latest version by clicking on the tool symbol and choosing the “About Chrome” menu entry.

Microsoft advises users to switch to Internet Explorer 9 which is soon to be released as final version according to the media. The company says that the flaw which has been abused for hacking the laptop during the Pwn2Own contest isn’t present in the new version.

Hopefully RIM, Google and Apple will deliver updates for the browsers for example on the smartphones based upon their operating systems soon, too.

Dirk Knop
Technical Editor

• Browser Updates
  Just a few days ago, two major web browsers have been updated to fix security vulnerabilities which may allow attackers to infect the computer with malware just by visiting a hacked website.Google rel...
• Adobe to Patch Flash Zero Day on Windows, Mac on Friday
  Adobe is planning to patch the recently disclosed Flash Player vulnerability on Friday for users on Windows, Mac OS X and Linux. The vulnerability is being used in targeted attacks right now that use ...
• Many Updates on Patch Tuesday
  Just as announced Friday last week, Microsoft released 17 security bulletins and according updates, fixing overall more than 60 security vulnerabilities in Windows, Internet Explorer, Office and the D...
• “The Hottest & Funniest Golf Course Video” scam has more than 200,000 likes on Facebook
  Right now there's a scam making its way across Facebook linking to a video titled "The Hottest & Funniest Golf Course Video - LOL" (example screen shot below). Websense customers are...
• One more Adobe 0-day vulnerability using Office files
  Today Adobe announced a new 0-day vulnerability (CVE-2011-0611) in Adobe Flash Player and Adobe Acrobat that, similar to the previous 0-day from less than a month ago, was found embedded in a Microsof...
• Respect the Browser – Security Awareness Recommendations
  Security awareness training usually incorporates web security topics. The message needs to be brief and relevant to non-techies, so they will pay attention. Consider focusing the audience’s attention...
• 4 Free Tools to Detect Local Insecure Browser Plugins
  Pursuing vulnerabilities in local software that is accessible through the web browser has been an effective attack vector. The following 4 free tools can help you identify locally-installed browser pl...
• More on the “massive” SQL injection attack
  Alas, the news was published on April 1st. But it is not a joke. Curious, I spent a bit of time today researching it (when I really was supposed to be doing other things), and while the “lizamoon” ...
• Facebook HTTPS is a Bit More Done…
  Our February 23rd post noted that Facebook's SSL "Secure Browsing" preferences had some issues remaining persistent. There's been some encouraging progress since then, and this is now what happ...
• Many Updates: Flash Player, Mac OS X, Firefox
  Today is a busy day for those who want to keep their computers secure: Many updates are available, from Adobes Flash Player over Apples Mac OS X operating system to the Firefox webbrowser. There is a ...