Second "new" IE attack in a week

ISC's story is the most complete reference at the moment on the VML exploit spotted in the wild.

I will be curious to see if the events of this week will cause a shift in the market percentages among browsers. I'm more curious to find a reliable and unbiased source of such statistics -- the closest I can get is Wikipedia. Nothing to sneeze at, surely, but there doesn't appear to be a clear leader in web usage stats, even today. Plus, I expect they're mostly going by User-Agent: fields, rather than testing specific javascript/DOM implementations.