@LulzSec just posted what it claims were the methods used to hack PBS.org.
"PBS.org was not owned by SQL," they write, "PBS.org was owned via a 0day we discovered in mt4 aka MoveableType 4."
Kevin Mitnick, who knows a little about this stuff, responds: "Yeah, they claim it's a bug in mt4… but I doubt they would reveal the vector until much later."
I'd imagine this will become clear soon, after the holiday passes. Background on the incident in this BB post; the mess continued throughout the day today and appears to be ongoing at the time of this blog post.