[nsp-sec] Bracing For Impact... MS08-067

[White, Gerard]

Greetings.

 

As you are all aware (hopefully), Microsoft has recently released a
patch outside of their normal cycle.

 

In my opinion, this was probably touched off as a result of a painful
decision between releasing a patch

that, if reverse-engineered, would touch off heavy miscreant activity -
vs. not releasing the patch, and

playing the waiting game.

 

So, also in my opinion, it probably won't be long (days?) before
miscreants attempt to take advantage

of this opportunity...  I would like to ask the community to watch their
darknets for spikes in TCP/135, 

 & TCP/445.

 

While the basic details are available here:

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

 

I Strongly encourage everyone to read better details here:

http://blogs.technet.com/swi/

 

GW

855 - Bell Aliant