Can someone steal a domain away just because you checked to see if it was available? It's happening, as we describe in the Whois Hijacking section.
Security researchers are hot on XSS (cross-site scripting) attacks and their potential for compromising Web sites. See an example of one in the XSS section.
Microsoft's patches this month included one for a scary DHCP vulnerability. It just got a lot scarier, as exploit code was released. See why you should patch now in the DHCP Exploit section.
It's a small matter in the big scheme of things, but along with attacks on Israel proper, Israeli Web sites were also targeted this month. Read details of the attack and the lessons it teaches in the Team Evil vs. Israel section.
If you have a domain name, you have to keep the contact records up to date. Why? We tell you why in this week's Security Tip.
Last week's top threat, a zero-day vulnerability in PowerPoint, yielded a second targeted attack. Find out how serious it is in Security Alerts and Updates.
We used lots of domain name jargon in this week's Security Watch, like domain tasting and whois, and we define the terms in this week's Jargon Watch
Meanwhile, in other security news, Visa changed the security rules they impose on retailers who use their card services. Read this and more in the Security Watch Story Feed.