http://blackhat.com/html/bh-usa-09/bh-usa-09-archives.html
I'm watching the Dowd presentation on how browser components attack each other, looks like good stuff.