Screaming Penguin - Source Does Matter

I knew somethign was up, I was trying to get to Apache.org for several hours today to download some Tomcat and Cocoon stuff, the site was unavailable. I actually thought the cache or the proxy box at the office had some issues, certainly its not the apache.org site that is down!

Turns out I was wrong, apache was cracked and a Microsoft BackOffice banner was erected on the site. The crackers exploited configuration errors in Bugzilla and FTP to make the chaos happen. Luckily Apache is back and hopefully no more serious harm was done.

Check the Kuro5hin link for a few more sparse details.   Apache.org Cracked! : Kuro5hin