Current Internet Threat Level

Regular vigilance. Ordinary activity compromises an unprotected network minutes to hours after first being connected to the Internet.

Automated SQL Injection Attacks: Over the past few months, IBM X-Force has seen an escalation of SQL injection and other web-related attacks. In the past few weeks, these attacks have culminated into automated SQL injection attacks that, in some cases, have systematically defaced websites.

Active Exploitation - Adobe Flash Player RCE: Several reports have stated that a zero-day Flash vulnerability is being exploited through several Chinese hacker websites. All of the samples X-Force has seen target the vulnerability disclosed in this Advisory, and X-Force has confirmed that the IPS protection released in November of 2007 does block these samples that are circulating in the wild.

Automated SQL Injection Attacks: Refer to IBM Internet Security Systems Protection Alert: Automated SQL Injection Attacks for more information.

Active Exploitation - Adobe Flash Player RCE: Refer to IBM Internet Security Systems Protection Advisory: Adobe Flash Player Invalid Pointer Vulnerability for more information.

We anticipate remaining at AlertCon 1.