Verisign Issues a Microsoft Digital Certificate by Accident
Someone Posing as MS empolyee convinced Verisign to issue him/her a digital certificate in MS's name. This Cert can be used for a multitude of things. Rouge ActiveX controls, and Macros viruses are among the hundreds of possibilities.
Read More Here