February 2007 Summary and Trends
The total number of events reported to the STEAM-CIRT decreased by 9% from last month, while the total number of actual IT incidents increased slightly by 2%. The decrease in total incidents is attributed to a 10% decrease in IRC Bot activity over last month. The number of spam incidents doubled for February versus January to a total of 12.
The STEAM-CIRT expects the number of IT Incidents to remain relatively steady in March, with the normal decrease in activity expected during spring break. However, March is the month of PHP bugs, so new PHP exploits may be on the horizon for that month and afterwards. STEAM-CIRT reminds areas running PHP applications to keep their installations up to date, and to review current installations for any necessary code updates. Additionally, STEAM-CIRT recommends that configurations be reviewed to ensure proper security practices are followed.
Posted by William Harshbarger on August 22, 2007, in Handlers Log.