Sophos has data on a new trojan (here) which is once again successful because Apple has taken its sweet time patching Java. More info here.

Oracle really needs to regain control of Java distribution for OS X because I think Apple has proven that they can't patch it with any speed. I understand why Apple took control from Sun originally (OS level integration) but I'd much rather have a working and patched installation over one that "looks pretty." Ugh...