F-Secure writes about a brand new MySpace worm that is making its way like crazy throughout profiles. It spreads by executing a bit of JavaScript embedded in a Quicktime file. And of course, users can embed whatever objects they want on their pages!

Spyware Sucks has a write-up sharing my same thoughts of MySpace: block it from your networks now. If you have kids, educate them about the badness of the site and get them off of it. If you’re in charge of IT at a company, filter it out.

Unless you want to stick with a website that sends password information unencrypted, lets its usernames and passwords get phished, and semi-knowingly exposes (and possibly infects) a million users to an old exploit via a banner ad.

Sheesh.