Microsoft Neutralizes Kelihos Botnet
http://blogs.technet.com/b/microsoft_blog/archive/2011/09/27/microsoft-neutralizes-kelihos-botnet-names-defendant-in-case.aspx

Diebold e-voting systems vulnerable to attack
http://www.h-online.com/security/news/item/Diebold-e-voting-systems-vulnerable-to-attack-1352743.html
http://politics.salon.com/2011/09/27/votinghack/

CSI:Internet - Open heart surgery
http://www.h-online.com/security/features/CSI-Internet-Open-heart-surgery-1350313.html

Mozilla Firefox and silent updates
http://www.brianbondy.com/blog/id/125/mozilla-firefox-and-silent-updates

Reverse Proxy Bypass
http://www.contextis.com/research/blog/reverseproxybypass/

0day Full disclosure: American Express
http://qnrq.se/full-disclosure-american-express/

Note: AE already fixed this.

ExploitHub Issues Bounty on 12 Client-side Exploits
http://www.nsslabs.com/company/news/press-releases/exploithub-issues-bounty-on-12-client-side-exploits.html
https://www.exploithub.com/request/index/developmentrequests/

Secret Orders Target Email
http://online.wsj.com/article/SB10001424052970203476804576613284007315072.html
http://news.cnet.com/8301-31921_3-20117919-281/justice-department-ramps-up-wikileaks-e-mail-probe/

German researchers crack RFID cards
http://www.h-online.com/security/news/item/German-researchers-crack-RFID-cards-1359218.html
http://www.emsec.rub.de/media/crypto/veroeffentlichungen/2011/10/10/desfire_2011_extended_1.pdf

Microsoft Security Intelligence Report (SIR) #11
http://www.microsoft.com/security/sir/default.aspx
http://download.microsoft.com/download/0/3/3/0331766E-3FC4-44E5-B1CA-2BDEB58211B8/Microsoft_Security_Intelligence_Report_volume_11_English.pdf
http://download.microsoft.com/download/0/3/3/0331766E-3FC4-44E5-B1CA-2BDEB58211B8/Microsoft_Security_Intelligence_Report_volume_11_Worldwide_Threat_Assessment_English.pdf
http://download.microsoft.com/download/0/3/3/0331766E-3FC4-44E5-B1CA-2BDEB58211B8/Microsoft_Security_Intelligence_Report_volume_11_Advanced_Malware_Cleaning_Techniques_for_the_IT_Professional_English.pdf

US experts concerned about risk to infrastructure posed by Anonymous
http://www.h-online.com/security/news/item/US-experts-concerned-about-risk-to-infrastructure-posed-by-Anonymous-1363015.html
http://info.publicintelligence.net/NCCIC-AnonymousICS.pdf

Rapid7 Launches New Metasploit Community Edition (for Free and Simple Vulnerability Verification)
http://www.rapid7.com/news-events/press-releases/2011/2011-metasploit-community.jsp
https://community.rapid7.com/community/metasploit/blog/2011/10/18/introducing-metasploit-community-edition
http://www.rapid7.com/products/metasploit-community.jsp

RUB Researchers break W3C standard
XML Encryption is insecure: Large companies affected
http://aktuell.ruhr-uni-bochum.de/pm2011/pm00330.html.en

Georgia Tech Turns iPhone Into spiPhone
http://www.gatech.edu/newsroom/release.html?nid=71506

Analysis of Signature Wrapping Attacks and Countermeasures
http://www.nds.rub.de/media/nds/downloads/mjensen/ICWS09.pdf

THC SSL DOS
http://thehackerschoice.wordpress.com/2011/10/24/thc-ssl-dos/
http://www.thc.org/thc-ssl-dos/

Microsoft Reaches Settlement with Piatti, dotFREE Group in Kelihos Case
http://blogs.technet.com/b/microsoft_blog/archive/2011/10/26/microsoft-reaches-settlement-with-piatti-dotfree-group-in-kelihos-case.aspx
http://noticeofpleadings.com/images/Botnet_voluntary_dismissal_file-stamped.pdf

avast 6, firefox, xp sp2
I have very slow dial up internet and something continues to download.

I put on PCtools 7 firewall, and activity is at Avast!Service.

Is there any way to find out what is downloading??

very frustrating as it makes any other internet even slower.

thanks

you need to start a separate thread about this issue.

How secure is HTTPS today? How often is it attacked?
https://www.eff.org/deeplinks/2011/10/how-secure-https-today
https://www.eff.org/files/colour_map_of_CAs.pdf