Microsoft is aware of a recent escalation in a class of attacks targeting Web sites that use Microsoft ASP and ASP.NET technologies but do not follow best practices for secure Web application developm...
http://feeds.feedburner.com/~r/HelpNetSecurity/~3/325630340/secworld.php