IE phishing exploit..

There is ANOTHER IE vulnerability that's come across the news in the last week. It seems that this is currently only a Proof of Concept, I'll have to check and see if anyone's reported seeing this in the wild..., but essentially a race condition between a Macromedia flash file and web content can allow a forged address bar location... in other words it might say www.google.com in the address bar, but you're actually looking at www.evilhackerplayground.org....

Turning off active scripting is a workaround at this point. (Or alternative browsers I suppose...)