Results 1 to 2 of 2

Thread: Threatcon at 3 out of 4?? "Known threat"

  1. #1

    Exclamation Threatcon at 3 out of 4?? "Known threat"

    I was just over at www.securityfocus.com and saw that the threat con indicator was at 3. I've seen it at 2 now for the past few weeks (increased alertness) (since the DCom bullshit), but today its at a solid three. This made me wonder what the "known threat" is, as this is the definition they give for level 3. I myself havent noticed any slowdowns, and my Snort logs arent showing anything out of the ordinary. *shrugs*

    "This condition applies when an isolated threat to the computing infrastructure is currently underway. Under this condition, increased monitoring is necessary, and redeployment and reconfiguration of security systems is recommended. People should be able to maintain this posture for a few weeks at a time, as threats come and go"

    I remembered having a link to a sit that broke down the scans and probes across the whole internet into protocol categories. If you know that link I would be greatly appreciative if it gets posted. Anybody have any insight as to what this could be?

  2. #2
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    Location
    The Great White North
    Posts
    1,867
    There is a new worm lose on the net. You can find more info here:

    http://www.antionline.com/showthread...hreadid=247294

    Cheers:
    DjM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •