Its update your browser time again... that is, if you use IE. They've found another spoofing hole in ol' reliable.

"The file-extension spoof means that an attacker could lull a user into opening a malicious file from a Web site by making the file appear as a legitimate extension, such as a PDF or MPEG, researchers said on Wednesday."