(I'm posting this as a story submission too.)
SANS Internet Storm Center (prev) and other monitors are tracking "Sanity" worm that automatically defaces PHP sites using a Perl payload. Patches for both PHP and phpBB are available.
Just the publicity we needed ...
