- Safari pwn2own patch unlikely to stop three time contest winner, Ars Technica
- Mozilla patches Java applet problem in Firefox, The H Open
- Further attacks on WordPress.com under investigation, The H Open
- Linux distributor security list destroyed after hacker compromise, Zero Day at ZDNet
- Yanked Android malware was aiming to build a mobile botnet, ReadWriteWeb
- Hackers spear phish, infiltrate French ministry of finance, Ars Technica
- USB driver bug exposed as plug and pwn, The H Security
- Vulnerabilities in STARTTLS implementations, The H Security
- XSS flaw in Android Market allows unauthorised installation of apps, The H Security
- Larger address space of IPv6 increases hassles of spam filtering, The Register
- Gaping security hole in Windows Media Player, Zero Day at ZDNet
- Apple ships fix for critical Java for Mac vulnerabilities, Zero Day at ZDNet
- Two botnets target malware tracking sites, Krebs on Security
- Day one of pwn2own contest, Ars Technica
- Mobile trojan mimics Android clean up tool, The Register
- iOS 4.3 fixes security vulnerabilities, The H Security
- Apple updates Safari, including security fixes, The H Security
- Malware discovered that targets Linux and Unix on network appliances, seeks root, The Register
- Apple’s latest security fixes for iOS don’t apply to older devices, The Register
- Day two of pwn2own contest, ReadWriteWeb
- Pidgin 2.7.11 closes DoS bug, The H Security