Update on the CNN worm

SANS - Internet Storm Center has updated its statement on the CNN worm: "CNN is heavily covering an outbreak of a worm in its own network. They are reporting that ABCNews and NYTimes are hit as well. All statements so far make this look like a Zotob variant, and Symantec just released info on the W32.Zotob.E variant here."

Microsoft upgraded this worm to 'moderate". They were calling it a "low impact" threat: What you should know about Zotob. Symantec has W32.Zotob.D removal instructions.

The biggest threat it appears is cash register, point of sale systems. I was in a Cingular Wireless store about an hour ago and they had been knocked offline.

The overall threat to unpatched enterprise systems remains to be seen, but you sys admins out there better put on a pot of coffee.