Here's an interesting article, aimed at developers, from www.net-security.org. Microsoft is aware of a recent escalation in a class of attacks targeting Web sites that use Microsoft ASP and ASP.NET technologies but do not follow best practices for secure Web application developm...
source:
www.net-security.org.
Read more from
www.net-security.org