This presentation given at RIATalks, it’s about fundamental flash security issues, attack surface of Flash and secure development.
During the presentation there was stealing data through vulnerable Crossdomain.xml files, you can download source code of this file – FlashSecurityCrossdomain.zip.