From today's krebsonsecurity.com blog, here's a story that provides more evidence that large companies still aren't taking security seriously. Yahoo's Site Builder is using an ancient version of Java. As usual with most of Brian's blogs, the commentary is interesting and definitely a cut above the run of the mill.

http://krebsonsecurity.com/2013/02/y...08/#more-18411