Symantec Reports Spate of Attacks Via Recent Windows Flaw
Surprised Giraffe writes "Symantec is warning of a sharp jump in online attacks that appear to be targeting a recently patched bug in Microsoft's Windows operating system, an analysis that some other security companies disputed. Symantec raised its Threat Con security alert level from one to two because of the attacks, with two denoting 'increased alertness.' The attacks spotted by Symantec target a flaw in the Windows Server Service that Microsoft says could be exploited to create a self-copying worm attack."
Arbor Networks disputed Symantec's interpretation, saying, "we're not seeing this rise, not on TCP port 445 and not on TCP port 139. Looking over the last month we don't see this rise in MS08-067 attacks that would raise any alarms for us," in a Friday blog posting.
Both McAfee and Microsoft echoed those sentiments.
Seems like a shameless plug for Symantec to "look better" than their competitors. Crying wolf here won't get them the additional sales they think they will get.
Attention all planets of the Solar Federation! We have assumed control! - Neil Peart
What's the maximum? Maybe eleven, or perhaps over 9000?
The 'levels' are :
1 - Normal alertness
2 - Increased alertness
3 - ???
4 - PROFIT !!!
@neonux
Why don't we just have a running headline banner that says something like...
{someone} discovered a serious security flaw in Microsoft's {product} and {offered to sell a solution|berated Microsoft}. They say the flaw should be {ignored|taken seriously} and that if it wasn't that there was a strong possibility of {not much|major|catastrophic|universe collapsing} repercussions.
{Mac|Linux} users were reported to gloat and tell everyone they were idiots for not switching to {Mac|Linux}. BSD users were running around naked, covered in crayon scribbling, and jabbering "definitely time for BSD, definitely....or Wopner"
Microsoft responded today by {downplaying|ignoring|finally patching after months but breaking something else with the patch} the threat.