Security Case Studies - What we learned from the 2009 phpbb.com compromise
blog.sucuri.net