Day 24 - Cleaning Email Servers and Clients
Welcome to Day 24 of the SANS ISC's participation in the Cyber Security Awareness Month. Today's topic is what you have to do when you have a virus or other such malware attack sat in your e-mail queue, or already on your clients as you did not get AV coverage soon enough.
Today of all days is the ideal time to discuss this issue. WIth MS08-067 being at the front of everyones workload at the moment, what are your plans to clean your e-mail systems should the current batch of malware get through your edge defences?
If you have any tricks or tips on how to overcome this issue, or do you just purge your queues and take the hit, let me know via the contact form and I'll update the diary through the day.
Yellow to Green : MS08-067
You may have noticed that the ISC Infocon was raised from Green to Yellow. This was to highlight the increased level of threat from MS08-067.
We have just moved back to green. This is not because of any lowering of threat, but to return to our normal steady state. People use the INFOCON level as a matter of understanding what is going on with the Internet and security as a whole.
If you see it raise again over the weekend, you'll know its gotten a whole lot worse.
Comments