MS internal network whacked by Code Red
Boneheaded employee strikes...
It's not just MSN - Code Red has just ripped through Microsoft's internal network too, according to our spies in Redmond. The unleashed worm is claimed to have whacked numerous servers on the corporate network; something of an embarrassment for Microsoft this, as it can only mean we hadn't quite got our act together on the patch front before the storm broke.
How did it happen? One of Microsoft's biggest internal security problems is smart-arse techies who decide to make their lives easier by ignoring and/or shorting out all the rules, thus leaving the company vulnerable to, say, employees' infected home machines. But not this time - somebody simply brought an infected, hibernated laptop in, connected it to the corporate network and bang, Code Red was inside the perimeter chomping away.
But the infection's probably a blessing in disguise, because it'll have helped Redmond's fire-fighters identify all of the machines still vulnerable, and so long as the press doesn't hear about it, High Command will be spared massive embarrassment. So shush people, OK? ®
Code Red worms into Hotmail servers
Sponsored: Becoming a Pragmatic Security Leader