Security Bug in Safari Browsers Puts OS X and iOS Users at Risk | The Mac Security Blog
Security researchers have discovered a serious Safari address-spoofing bug that can deceive users about the sites they're visiting. The exploit works on fully patched versions of OS X and iOS, and could be used by cyber-criminals in phishing or malware attacks.

Once again, Safari providing the holes while the reams of third party developers trying to shoehorn their code into increasingly restrictive runtime requirements. I like the security features of OSX, I just think that the attack vectors are not small 3rd party apps in the Mac App Store.

Labels: security flaw