So it seems like some security guys have found a few new attacks, posted as image links on blogs.  These posts are engineered to end up on high Google results, but point to malware sites.  It apparently doesn’t work on up to date server software, so keeping your updates current is a good idea.

You can get more details here and here.