IT-Security-Links #10

Rapid 7 released a whitepaper about Universal Plug and Play Security Flaws as a result of a research project. They found millions of devices on the internet to be at risk. An UPnP FAQ is available here.
Contemplating the value of Antivirus in the context of targeted attacks: A nice overview of recent articles and a whitepaper done by the ncc group.
After the recent Security Alerts for Java: Watch out for fake Java updates! Microsoft warns their users.
The New York Times reports in detail how Chinese hackers have persistently attacked them over the past month. And the Wall Street Journal goes one better.
“Pentagon’s new massive expansion of ‘cyber-security’ unit is about everything except defense”, The Guardian says.
10th Anniversary of the Slammer Worm: A nice recapitulation by fsecure.