Bruce Schneier tells us that SHA-1 has been broken. Apparently this is judged to be a believable claim, although the paper explaining details of the attack is not yet generally available. Read Bruce's blog entry here.