Permalink to the McAfee AVERT Labs blog is
http://www.avertlabs.com/research/blog/index.php/2007/10/31/crimeware-co
mes-to-os-x/

Additionally, US-CERT has issued a Current Activity warning today at
http://www.us-cert.gov/current/#mac_dns_changer_trojan

US-CERT points to the very coverage ISC Diary

[ more ]  [ reply ]

<http://www.symantec.com/business/security_response/writeup.jsp?docid=20
07-110101-2320-99&tabid=1>
Risk Level 1: Very Low

TinyURL: http://tinyurl.com/2cwky6

Security Response Researcher
Focus-Apple Moderator
 
________________________________________
Todd D. Woodward
Technical Support Engineer
Net

[ more ]  [ reply ]

For those who are waiting for corroboration/further info, I gather Sophos
and McAfee have added detection. Sophos have a press release at
http://www.sophos.com/pressoffice/news/articles/2007/11/mac-osx-trojan.h
tml
and McAfee have a blog worth reading
http://www.avertlabs.com/research/blog/.

I'm not

[ more ]  [ reply ]

I know I risk another bozo hatemailstorm by posting this, but I know there
are people on this list who are interested in/concerned about this issue.
There's a decent quick 'n' dirty analysis at
http://isc.sans.org/diary.html?storyid=3595 by Bojan Zdrnja, who is not a
trained parrot.

I will not was

[ more ]  [ reply ]

Although not specifically security related, virtualization is quite a bit in security testing and research...

The following article for your consideration and discussion:

Apple to Allow Virtualization of Leopard
By Adam C. Engst
http://db.tidbits.com/article/9277

My only comment is that this is

[ more ]  [ reply ]