MS-ISAC

Multi-State Information Sharing and Analysis Center

Alert Level:

The Current Cyber Alert Level is: Guarded

On June 30, 2009, the Cyber Alert Level is remaining at Blue (Guarded) due to a vulnerability discovered in Adobe Shockwave Player. We issued an advisory for this vulnerability on June 25, 2009 and recommended that all versions of Shockwave Player up to version 11.5.0.596 be removed, and that Shockwave Player 11.5.0.600 be installed. Organizations and users are encouraged to update and apply all appropriate vendor security patches to vulnerable systems and to continue to update their antivirus signatures daily. Another line of defense includes user awareness training regarding the threats posed by attachments and hypertext links contained in emails especially from un-trusted sources.

The Current Cyber Threat Advisory is: Guarded

The Current Physical Threat Advisory is: Elevated

The Current Threat Level is: AlertCon 1

AlertCon 1 reflects the malicious, determined, global, 24 x 7 attacks experienced by all networks

The Current Threat Level is: Elevated

• Vulnerability in Adobe Shockwave Player Could Allow Remote Code Execution
• Multiple Vulnerabilities in Mozilla Firefox, SeaMonkey, and Thunderbird could allow for Remote Code Execution
• Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (MS09-027)
• Vulnerability in Microsoft Excel
• Multiple Authentication Bypass Vulnerabilities in Microsoft IIS Web Servers Could Allow for Privilege Escalation