Facebook security hole.

Facebook summarily denies undeniable user-menacing security hole | The Register

Facebook's hip new application platform contains a gaping hole that allows attackers to run malicious javascript on unsuspecting users' machines, a developer has demonstrated.