Top 10 Web Hacks of 2006

What do you all think about this and can we expect more of this in 2007?

http://ha.ckers.org/blog/20061215/top-10-web-hacks-of-2006/

LowWaterMark - Edited to add related article link:

http://jeremiahgrossman.blogspot.com/2006/12/top-10-web-hacks-of-2006.html

 

And here are "The Top Ten Threats for 2007":

http://blogs.zdnet.com/threatchaos/?p=443

 

I tried :

 

What's that and where does it come from?

 

1. Virtualization of traditional attack vectors (IM, email, web, doc, pdf, ect)
2. Complete distrust and testing of directly installed code with even a hint of questionable origin.


I'll add my own bit of gloom and doom

ADS has been a potential concern for over 6 years (which is when I first started using LADS) but was largely unemployed by malware authors till recently. Some applications allowed you to scan ADS for hidden malware (TDS3 for instance) The rise in rootkits in general has been the largest development in the last few years with an ongoing war between creation and detection, but the latest twist has been this new generation of ADS rootkits specifically

very very nasty

 

http://ha.ckers.org/blog

It was blocked by LinkScanner Pro

Gerard

 

What's the page?

 

Hello,
Reading about those exploits - one word comes to mind: IE.
Most of these crapponers will work well only in IE. Normal browsers are less subject to exploits.
Mrk

 

Well, if the first site is really malicious, I guess it´s best to remove it, but as you can see, the second site even links a couple of times to the first site.