Last Updated: 2009-07-07 14:55:52 UTC
by Marcus Sachs (Version: 1)
We had some internal discussion overnight about whether to raise our Infocon status to YELLOW because of an 0-day in a Microsoft ActiveX control that was reported yesterday (see the diaries: Internet Explorer and DirectShow). Because there is adequate coverage in the security software community (IDS detection, AV detection, etc.) and Microsoft has a bulletin available we decided to stay GREEN. However, we are flashing the Infocon globe so if you are using Tom Liston's Infocon tracking tool it should be blinking. Consider this a "test of the emergency broadcast system" as well as a reminder to change the batteries in your smoke detectors.
Marcus H. Sachs
Director, SANS Internet Storm Center