Author: Andrew Hay

MS06-040 Advisory

Well I heard from two customers today that are currently experiencing the effects of the MS06-040 worm. They’ve noticed quite a lot of traffic on port 445 and external connection attempt using IRC. For a full writeup please see the following link: MS06-040: BOLO — Be On the LookOut (NEW)

Andrew Update Q3’06

  • Studying for my CISSP again — exam in Ottawa in December
  • GCIH, GCFA, GAWN, on deck for Q1’07, Q2’07, Q3’07, respectively
  • Presenting SANS StaySharp classes in Fredericton, NB starting in Q4’06

Stay tuned for more…

New host…new blog

Well I had to switch to a more reliable hosting provider so you’ll have to keep checking back for updates.

Scroll to top