[mithrandir (Andrew)]

Here's the CERT advisory. There's an entry in this morning's issue of SANS NewsBites too. I can't post that (not permitted), but they reference:

arstechnica
computerworld
krebsonsecurity