Older news, but a good example
I get asked all the time about what security researches do. This is a blog page from f-secure from December of last year that talks about, among other things, the IE WMF exploit that has been widely taken advantage of over the past several months. The page does a good job of describing a variety of combinations of things a researcher must look for and notice about an exploit. These examples are not low level assembly type things but stuff security pros at any level should be prepared to understand.
Take a look ...
F-Secure: News From the Lab
Take a look ...
F-Secure: News From the Lab
