No Web Site Is Immune Anymore

It used to be that if you avoided shady sites, like porn and gambling sites, you weren't likely to catch any malware. But today, 51% of hacked sites are legitimate ordinary web sites that have been compromised by malware-bearing hackers, according to Websense.

The best advice? Just keep your patches up-to-date, use anti-virus software and a personal firewall. They won't provide total protection -- nothing does -- but they do reduce the risk.

In other web security news, a researcher has cracked the CAPTCHA used by Yahoo, long considered one of the toughest to break. This little breakthrough could spell real trouble for sites using CAPTCHA to block spam.

There was also a directory traversal attack uncovered against Firefox and a breach of a site using the Hacker Safe seal, showing how weak these seals really are.