"Phishing flaw catches Xbox 360 site Microsoft patches www.xbox360.com after phishing attack warning
Microsoft has patched a potentially dangerous flaw on its www.xbox360.com website after security experts warned the software giant of a cross-site scripting vulnerability which could be exploited by hackers to launch phishing attacks.
The vulnerability could be used by web criminals to gather personal and confidential information, such as email address, home address and credit card number, from innocent consumers wishing to pre-order Microsoft's forthcoming gaming console."
Let's just hope Xbox live is secure. Microsoft isn't known for secure software.