contributed by harvest
A flaw in Extropia's e-commerce software left Earthlink open to a directory traversal vulnerability. Combined with an unprotected password file, Earthlink servers were at risk for nearly a week after the flaw had been publicized on Bugtraq. As many as 81,000 accounts were subject to attack during the time the servers were open to infiltration.

ZDNet

contributed by harvest
After Bletchley Park Museum officials reportedly agreed to pay the £25,000 ransom to safely recover the stolen Enigma encoding machine, the machine seems to have mysteriously arrived by mail to BBC television presenter Jeremy Paxman, who isn't quite sure why the machine was sent to him. Museum officials are now trying to confirm the authenticity of the machine Paxman was sent..

BBC News

contributed by laney
Due to the positively pathetic state of security at the Federal Aviation Administration (FAA) as reported by the General Accounting Office, the proverbial you know what has hit the fan. Testifying in front of the House Science Committee last week, FAA's Jane Garvey said she was not aware of the FAA's security woes until the GAO issued its report. Yeah, right.

ABC News

contributed by weld pond
Another in a long string of flaws has been discovered in a Microsoft product. This time the flaw is in the Web server software and it is believed that the problem went unreported for quite some time. Rain Forest Puppy let Microsoft in on the news.

MSNBC