Security vulnerabilities and malware rise in 2008 as the criminal underground heats up its data theft and identity fraud activities, new Symantec Internet security report finds.