"A large-scale hack of legitimate Web sites to infect visitors' PCs is much more massive than first thought, researchers said today. At least 10,000 sites have been compromised, and have hijacked unpatched systems that steered to their URLs.
"On Monday, Mary Landesman, a senior security researcher at ScanSafe Inc., said that she had uncovered hundreds of sites which had been hacked and were feeding exploits to visitors. Today, Don Jackson, a senior researcher with Atlanta-based SecureWorks Inc., said the number was considerably larger..."