Well I heard from two customers today that are currently experiencing the effects of the MS06-040 worm. They’ve noticed quite a lot of traffic on port 445 and external connection attempt using IRC. For a full writeup please see the following link: MS06-040: BOLO — Be On the LookOut (NEW)

• Studying for my CISSP again — exam in Ottawa in December
• GCIH, GCFA, GAWN, on deck for Q1’07, Q2’07, Q3’07, respectively
• Presenting SANS StaySharp classes in Fredericton, NB starting in Q4’06

Stay tuned for more…

Well I had to switch to a more reliable hosting provider so you’ll have to keep checking back for updates.