All those employees at Google who reportedly feel a whole lot safer running Mac OS X instead of Windows might want to sit down for this: Security company Intego today announced that a high-risk spyware application called OSX/OpinionSpy is spreading via "a number of freely distributed Mac applications and screen savers found on a variety of Web sites." Under the guise of a "market research program," the spyware -- a variant of malware that's existed for Windows since 2008 -- is designed to collect a wealth of data on accessible local and network volumes, then send it off to its servers for likely unsavory uses. That data, according to Intego, may include user names, passwords, credit card numbers, Web browser bookmarks, and history."
News Story is here...

Apple has issued Security Update 2009-002/Mac OS X v10.5.7 to address
numerous security flaws and add hardware support.  Among the flaws
addressed are cross-site scripting vulnerabilities in Apache and buffer
overflow flaws in Safari.  Twenty-six of the 67 flaws could be exploited
to inject and execute arbitrary code.  Two of the vulnerabilities fixed
in the update were discovered during a contest in March.
http://www.theregister.co.uk/2009/05/13/apple_10_5_7_leopard_update/
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9132998
http://www.h-online.com/security/Mac-OS-X-10-5-7-available--/news/113273
http://support.apple.com/kb/HT3549
ISC: http://isc.sans.org/diary.html?storyid=6382

All those employees at Google who reportedly feel a whole lot safer running Mac OS X instead of Windows might want to sit down for this: Security company Intego today announced that a high-risk spyware application called OSX/OpinionSpy is spreading via "a number of freely distributed Mac applications and screen savers found on a variety of Web sites." Under the guise of a "market research program," the spyware -- a variant of malware that's existed for Windows since 2008 -- is designed to collect a wealth of data on accessible local and network volumes, then send it off to its servers for likely unsavory uses. That data, according to Intego, may include user names, passwords, credit card numbers, Web browser bookmarks, and history."
News Story is here...

Apple has issued Security Update 2009-002/Mac OS X v10.5.7 to address
numerous security flaws and add hardware support.  Among the flaws
addressed are cross-site scripting vulnerabilities in Apache and buffer
overflow flaws in Safari.  Twenty-six of the 67 flaws could be exploited
to inject and execute arbitrary code.  Two of the vulnerabilities fixed
in the update were discovered during a contest in March.
http://www.theregister.co.uk/2009/05/13/apple_10_5_7_leopard_update/
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9132998
http://www.h-online.com/security/Mac-OS-X-10-5-7-available--/news/113273
http://support.apple.com/kb/HT3549
ISC: http://isc.sans.org/diary.html?storyid=6382