The Security Mentor

Earlier this month Microsoft released an emergency path for a problem which allowed bad guys to take over your computer by sending you a picture with type .WMF. This was a scary problem because you could lose control of your computer without doing anything stupid. In fact, you didn't need to open the image at all to be infected.

The scary part is that the bad guys found out about the vulnerability before the good guys did. News of the WMF attack was sold on the black market in mid-December. Reportedly, bad guys were taking over machines in quiet, targted attacks for almost a month.

How many more problems like this are there, that bad guys are using and good guys don't know about?