Week in review: vBulletin 0-day, open source projects under attack, critical security updates galore