SPOTLIGHT: Javascript attack gains control of routers

Running a D-Link or Linksys router with the default admin login and password? For shame. Need yet another reason to change it? Here you go: Researcher Dan Kaminsky has developed an attack that can gain control of your router, by simply directing the victim to a webpage containing a malicious Javascript app. Article