Researchers say holes on security vendor’s sites could lead to phishing and other attacks on customers.. Read the rest at cnet.com.