The Internet Storm Center keeps a running counter which measures the average survival time of an unpatched Windows system. They do this by keeping track of the average time between attacks.

Today, the sensor reads 93 minutes. Not even a half year ago, this sensor was at 15 minutes. Is the Net getting safer? Did we finally get the message across that users need to patch their system? Let's hope so! From our own mini honeynet at Tilburg University, it seems like the only thing still going on is the MySQL worm and the Oracle LOCK vulnerability.