Check the link!

http://www.microsoft.com/security/incident/aspnet.mspx