Surveillance Company Says It Sent Fake iTunes, Flash Updates
Great. Now we can't even trust software updates from "legitimate" companies. The only workaround is to ONLY get your updates manually from the software maker's website.
UPDATE: Or do it via ninite.com, mentioned above.