An article on a vulnerability should contain solid information on an attack vector. Lacking this information leads me to wonder if the stated compromised sites have all been uniformly compromised or if this situation is the result of multiple vulnerabilities. As it stands this is mostly FUD.