News

CERT Quarterly Report: Reconnaissance Activity Up

Better batten down the hatches. In its latest quarterly report, CERT finds that network reconnaissance activity is on the rise.

"Over the past several weeks, the CERT/CC [Coordination Center] has observed a significant increase in network reconnaissance activity," the Carnegie Mellon-based security organization noted in its report.

CERT attributes some of the traffic to the Sadmind/IIS worm and another worm known as the "cheese" worm.

However, CERT says its data indicates that there is also active scanning going on for known vulnerabilities in other network services and a lot of generalized port scans happening to hosts.

"In order to minimize exposure to this activity, the CERT/CC recommends that sites review and apply vendor-supplied security patches, disable non-critical network services and actively monitor system and network logs for unusual activity," the report recommends.

Reports continue to flood in at CERT of sites affected by the Sadmind/IIS worm. The number of Internet Information Server/Services sites defaced through the use of the self-propogating malicious code has run away to 6,000. CERT also says at least 500 Solaris machines have been compromised by the Sadmind/IIS worm. The worm compromises Solaris machines, which are then used to deface IIS sites.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Uniting OneDrive and SharePoint Admin Portals Next Month

    Microsoft is converging its OneDrive and SharePoint Admin Center management portals, with a consolidated portal expected to arrive for Microsoft 365 subscribers "through February."

  • Phishing Tops Concerns in Microsoft Study of Remote Work

    Potential phishing attacks were a top concern of most IT security professionals when organizations switched to remote-work conditions early last year.

  • How To Configure Windows 10 for Intel Optane Memory

    Intel's Optane memory technology can significantly improve the performance of your Windows 10 system -- provided you enable it correctly. A single mistake can render the system unbootable. Here's how to do it the right way.

  • Microsoft and SAP Enhance Partnership with Teams Integration

    Microsoft and SAP this week described continuing partnership efforts on Microsoft Azure, while also planning a Microsoft Teams integration with SAP's enterprise resource planning product and other solutions.

comments powered by Disqus