Virus-slingers abuse WordPress vulnerabilities, which pushes the exploit onto visitors' computers.
Blogs also infected with this information-harvesting Trojan

Malware-spreaders are hacking into vulnerable WordPress-powered sites in order to drive traffic towards pages loaded with exploits.
Hundreds of websites based on WordPress 3.2.1 have been compromised so that surfers directed to the Wordpress-built sites via email links are exposed to the Phoenix exploit kit.

>Story at theregister.co.uk

So if you know anyone who has a Blog or website that's using WordPress, make sure that the Wordpress software is updated.

By the way, 1USA doesn't use WordPress on our hosted websites - due to continual security issues with it.
If you don't believe me, here's a list of recent Wordpress Vulnerabilities.

If you want a secure website or a secure blog, give us a call.
BarryZ
 

Referring to: http://bugs.php.net/53632

PHP 5.3.5 and 5.2.17 were released quickly to address critical bugs discovered on 30/12/2010, looks like the earlier PHP versions on 32-bit systems are vulnerable to simple Denial of Service attack by remote user which will bring your server to its knees (exhaust server's CPU resources).

Solution: install patch or the latest PHP version (we recommend 5.2.17 for compatibility's sake).

As the temporary solution you can use the following mod_security rule:
SecRule QUERY_STRING "\d+e\-\d+" "phase:2,deny,status:403"
 

ESPN's Fantasy Football site is riddled with flaws that allow players to rig games, a security researcher says.

The online contest allows players to pretend they are owners of American football teams as they compete against other imaginary owners to pick a winning lineup from real-life members of the National Football League.
Story at TheRegister

A website run by the conservative Tea Party movement was overrun by the denizens of 4chan on Tuesday.
Website vulnerabilities on the official teaparty.org website allowed pranksters to divert surfers landing on the photo section of the site to smut and shock sites. It's unclear what website security shortcomings were exploited.
Story on TheRegister
 

http://www.techworld.com/security/news/index.cfm?newsID=117172&pagtype=samechan
Story from TechWorld

Many banks use a service by CheckFree instead of building their own websites where customers login to edit their bank accounts.  Checkfree got hacked in January 2009.
Full story on ComputerWorld: