Phishing concerns cause double trouble

Episode 1: Last week the administrators of 7,000 university websites were being called upon to change their .edu domain account passwords after a server security breach. Trouble was that the breach had been reported to the admins by Educause — the non-profit higher-education IT group that runs .edu — via an email that some recipients complained bore the familiar markings of a phishing attempt.