Speaking of client-side sploits, it appears that AMD's forums website was used to distribute WMF exploit code the other day.  F-Secure has a write-up on the situation.  It's been resolved, but there is likely a very interesting story behind this one.  Again, client side exploits are the wave of the present.

Update: And now... the rest of the story (at least some of it).  A diligent reader forwarded us to this ZDNet story about what happened.  Seems that another company ran these fora for AMD, and they didn't update their software so they got whacked and turned into a wmf exploit dispenser.