PayPal patches potential payment-stealing vulnerability
nakedsecurity.sophos.com