Symantec.com > Enterprise > Security Response > Symantec ThreatCon

ThreatCon

The ThreatCon is currently at Level 1: Normal.

On May 8, 2012, Microsoft released its scheduled patch update for May 2012. This month's update covers vulnerabilities in the Microsoft Windows operating system, Microsoft Office, Microsoft Excel, Microsoft Visio Viewer, Microsoft Silverlight, and Microsoft .NET Framework. Seven security bulletins have been released to address these issues.

Previously, on May 4, 2012, Adobe released Adobe Flash Player 11.2.202.235 for Windows, Mac and Linux. The patch fixes CVE-2012-0779 (BID 53395), which is being actively exploited in the wild in targeted attacks via e-mail messages. Attacks in the wild are currently targeting the Windows platform. However, all platforms are affected and could potentially be targeted. Adobe Flash Player 11.1.115.8 and 11.1.111.9 have been released for Android 4.x and 3.x and 2.x respectively.

Customers are advised to install all applicable updates as soon as possible.

Microsoft Security Bulletin Summary for May 2012
http://technet.microsoft.com/en-us/security/bulletin/ms12-may

Security updates available for Adobe Flash Player 11.x for Windows, Mac, Linux and Android
https://www.adobe.com/support/security/bulletins/apsb12-09.html

Adobe Flash Player CVE-2012-0779 Object Type Confusion Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/53395

Symantec ThreatCon Rating

The Symantec ThreatCon rating is a measurement of the global threat exposure, delivered as part of Symantec DeepSight Threat Management System.

ThreatCon Level 1
Low : Basic network posture
This condition applies when there is no discernible network incident activity and no malicious code activity with a moderate or severe risk rating. Under these conditions, only a routine security posture, designed to defeat normal network threats, is warranted. Automated systems and alerting mechanisms should be used.

View ThreatCon Definitions

Symantec DeepSight Threat Management System

Symantec DeepSight Threat Management System tracks security events on a global basis, providing early warning of active attacks. With personalized notification triggers and expert analysis, the system enables enterprises to prioritize IT resources in order to better protect critical information assets against a potential attack. To track security threats, it continuously correlates IDS and firewall attack data from the security systems of over 20,000 partners in over 180 countries, plus virus statistics from the Symantec Digital Immune System and many other human intelligence resources. Experts at Symantec analyze the information to identify active attacks and deliver advanced warning with actionable analyses and countermeasures.

Bookmark & Share