Another Web Security Roundup

Here's another round up of recent web exploits of note. This one is clever. Users are prompted to enter a CAPTCHA to disrobe a model. The CAPTCHAs are from legitimate Yahoo sites and may be used to gain access to accounts.

The Storm worm was recently used to send out audio spam on MP3 files and a cross-site scripting attack against VoIP was revealed.

Another Firefox URL-handling bug was discovered by a security researcher and JavaScript mashups are now a cause for concern.

And, finally, Jeremiah Grossman told his blog readers to crawl web sites to check for vulnerabilities.