Security Threat Watch: Update

A note from this week's Neohapsis Security Threat Watch newsletter:

A lot of discussion this past week concerned the appropriateness of the
Organization for Internet Safety (OIS), a vendor-formed organization
meant to create a guideline for security vulnerability disclosure. OIS
released a public invitation to review its latest guideline revisions,
which raised various concerns by numerous security researchers. The
largest concern seems to be the bias of the guidelines in favor of
vendors and not security researchers or end users. For those interested
in following some of the thread, the initial post is located in our archives.

Also, there was additional discussion on various Internet Explorer
exploit derivatives that still seem to be functional, despite the
application of the latest patches and hardening techniques. We feel
that, as time progresses, the security liability of Internet Explorer
will continue to increase.