Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: * INFOCON Status - staying green SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
* INFOCON Status - staying green

We had some internal discussion overnight about whether to raise our Infocon status to YELLOW because of an 0-day in a Microsoft ActiveX control that was reported yesterday (see the diaries:  Internet Explorer and DirectShow).  Because there is adequate coverage in the security software community (IDS detection, AV detection, etc.) and Microsoft has a bulletin available we decided to stay GREEN.  However, we are flashing the Infocon globe so if you are using Tom Liston's Infocon tracking tool it should be blinking.  Consider this a "test of the emergency broadcast system" as well as a reminder to change the batteries in your smoke detectors.

Marcus H. Sachs
Director, SANS Internet Storm Center


301 Posts
ISC Handler
Jul 7th 2009

Based on the above entry, should the Infocon Tracking Tool be flashing at this time?
(2:26 PM EDT)

I am curious, cause mine has been staying green and solid since I started it more than 1.5 hours ago.

Sign Up for Free or Log In to start participating in the conversation!