Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

McAfee SiteAdvisor says 'SANS, you are Bad!'

Published: 2008-07-30
Last Updated: 2008-07-30 23:12:48 UTC
by David Goldsmith (Version: 3)
1 comment(s)

We've received reports from Nate and some others today that when they go to various SANS websites today, McAfee SiteAdvisor is showing a red status saying the site is 'bad'.

When we look at the site reports, and are bad simply because they have links to the web site.  The web site is now considered bad because of two links in CVA newsletters that point to exploit samples on 3rd party web sites.

We have submitted a comment via the SiteAdvisor web site and are simply waiting to hear back if they change the site status in their database.

Same bat-time, same bat-channel.  Its still the SANS web site with the same content that has been there for quite some time.

Update 1: McAfee is working on updating the status of the SANS web site.  Currently, when you go to the site, you still get a red SiteAdvisor button, but if you click on 'View Site Details', they now show the site as being green.  Hopefully the data being used to feed the button display will change soon.

Update 2: McAfee has resolved this and the, and sites are now all displaying a 'green' status from Site Advisor.

David Goldsmith

1 comment(s)
Diary Archives