For those who haven't heard yet. There is a new browser vulnerability (see a demo by secunia below)

It is impressive (and scary) what bad guys are capable of.

http://secunia.com/multiple_browsers_window_injection_vulnerability_test/

Yes, saw that today. And it's related to a pop-up which hides the real URL. Which reminds me of the latest Nielsen which again stressed the fact popups hurt usability big time. When will they ever learn :)
http://www.useit.com/alertbox/20041206.html