The Web Security Mailing List
Nothing new, just a 101 approach of this attack:
http://danuxx.blogspot.com/2013/09/cbc-byte-flipping-attack-101-approach.html
-- DanUx