SANS ISC: InfoSec Handlers Diary Blog - SANS Internet Storm Center

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

InfoSec Handlers Diary Blog

We had some internal discussion overnight about whether to raise our Infocon status to YELLOW because of an 0-day in a Microsoft ActiveX control that was reported yesterday (see the diaries:  Internet Explorer and DirectShow).  Because there is adequate coverage in the security software community (IDS detection, AV detection, etc.) and Microsoft has a bulletin available we decided to stay GREEN.  However, we are flashing the Infocon globe so if you are using Tom Liston's Infocon tracking tool it should be blinking.  Consider this a "test of the emergency broadcast system" as well as a reminder to change the batteries in your smoke detectors.

Marcus H. Sachs
Director, SANS Internet Storm Center