I know this is ancient news in the Internet timescale, but...
Without commenting on the fraud aspect of the article, it still hurts to realize how CXOs believe a CMM certification has anything to do with the quality of the software process... As someone mentioned in a past CMM assessment recap meeting, CMM (as well as ISO 900X) is about making sure you're following the process you say you're following. Nothing more, nothing less.
How did this happen? Not too long ago when one would get blank stares for mentioning the term "continuous integration" and today there's so many continuous integration products out there that it takes a full week to evaluate them all...
And the list goes on (although I think I listed the most common ones above).
With a bit of Googling, I even found one for PHP (nevermind that it isn't feature complete).